CVE-2021-47122

Summary

In the Linux kernel, the following vulnerability has been resolved:

net: caif: fix memory leak in caif_device_notify

In case of caif_enroll_dev() fail, allocated link_support won't be assigned to the corresponding structure. So simply free allocated pointer in case of error

Affected Software

VendorProductVersion RangeStatus
LinuxLinux7c18d2205ea76eef9674e59e1ecae4f332a53e9e < b042e2b2039565eb8f0eb51c14fbe1ef463c8cd8affected
LinuxLinux7c18d2205ea76eef9674e59e1ecae4f332a53e9e < 9348c1f10932f13b299cbc8b1bd5f780751fae49affected
LinuxLinux7c18d2205ea76eef9674e59e1ecae4f332a53e9e < 4bca2034b41c15b62d47a19158bb76235fd4455daffected
LinuxLinux7c18d2205ea76eef9674e59e1ecae4f332a53e9e < 3be863c11cab725add9fef4237ed4e232c3fc3bbaffected
LinuxLinux7c18d2205ea76eef9674e59e1ecae4f332a53e9e < f52f4fd67264c70cd0b4ba326962ebe12d9cba94affected
LinuxLinux7c18d2205ea76eef9674e59e1ecae4f332a53e9e < af2806345a37313f01b1c9f15e046745b8ee2daaaffected
LinuxLinux7c18d2205ea76eef9674e59e1ecae4f332a53e9e < 6a0e317f61094d377335547e015dd2ff12caf893affected
LinuxLinux7c18d2205ea76eef9674e59e1ecae4f332a53e9e < b53558a950a89824938e9811eddfc8efcd94e1bbaffected
LinuxLinux3.3affected
LinuxLinux0 < 3.3unaffected
LinuxLinux4.4.272 <= 4.4.*unaffected
LinuxLinux4.9.272 <= 4.9.*unaffected
LinuxLinux4.14.236 <= 4.14.*unaffected
LinuxLinux4.19.194 <= 4.19.*unaffected
LinuxLinux5.4.125 <= 5.4.*unaffected
LinuxLinux5.10.43 <= 5.10.*unaffected
LinuxLinux5.12.10 <= 5.12.*unaffected
LinuxLinux5.13 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References