CVE-2021-47171

Summary

In the Linux kernel, the following vulnerability has been resolved:

net: usb: fix memory leak in smsc75xx_bind

Syzbot reported memory leak in smsc75xx_bind(). The problem was is non-freed memory in case of errors after memory allocation.

backtrace: [<ffffffff84245b62>] kmalloc include/linux/slab.h:556 [inline] [<ffffffff84245b62>] kzalloc include/linux/slab.h:686 [inline] [<ffffffff84245b62>] smsc75xx_bind+0x7a/0x334 drivers/net/usb/smsc75xx.c:1460 [<ffffffff82b5b2e6>] usbnet_probe+0x3b6/0xc30 drivers/net/usb/usbnet.c:1728

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxd0cad871703b898a442e4049c532ec39168e5b57 < 200dbfcad8011e50c3cec269ed7b980836eeb1faaffected
LinuxLinuxd0cad871703b898a442e4049c532ec39168e5b57 < 22c840596af0c09068b6cf948616e6496e59e07faffected
LinuxLinuxd0cad871703b898a442e4049c532ec39168e5b57 < 9e6b8c1ff9d997e1fa16cbd2d60739adf6dc1bbcaffected
LinuxLinuxd0cad871703b898a442e4049c532ec39168e5b57 < 9e6a3eccb28779710cbbafc4f4258d92509c6d07affected
LinuxLinuxd0cad871703b898a442e4049c532ec39168e5b57 < b95fb96e6339e34694dd578fb6bde3575b01af17affected
LinuxLinuxd0cad871703b898a442e4049c532ec39168e5b57 < 635ac38b36255d3cfb8312cf7c471334f4d537e0affected
LinuxLinuxd0cad871703b898a442e4049c532ec39168e5b57 < 70c886ac93f87ae7214a0c69151a28a8075dd95baffected
LinuxLinuxd0cad871703b898a442e4049c532ec39168e5b57 < 46a8b29c6306d8bbfd92b614ef65a47c900d8e70affected
LinuxLinux2.6.34affected
LinuxLinux0 < 2.6.34unaffected
LinuxLinux4.4.271 <= 4.4.*unaffected
LinuxLinux4.9.271 <= 4.9.*unaffected
LinuxLinux4.14.235 <= 4.14.*unaffected
LinuxLinux4.19.193 <= 4.19.*unaffected
LinuxLinux5.4.124 <= 5.4.*unaffected
LinuxLinux5.10.42 <= 5.10.*unaffected
LinuxLinux5.12.9 <= 5.12.*unaffected
LinuxLinux5.13 <= *unaffected

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References