CVE-2021-47364

Summary

In the Linux kernel, the following vulnerability has been resolved:

comedi: Fix memory leak in compat_insnlist()

compat_insnlist() handles the 32-bit version of the COMEDI_INSNLIST ioctl (whenwhen CONFIG_COMPAT is enabled). It allocates memory to temporarily hold an array of struct comedi_insn converted from the 32-bit version in user space. This memory is only being freed if there is a fault while filling the array, otherwise it is leaked.

Add a call to kfree() to fix the leak.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxb8d47d8813055ce38c0d2ad913d5462017e52692 < 8d6a21e4cd6a319b0662cbe4ad6199e276ac776aaffected
LinuxLinuxb8d47d8813055ce38c0d2ad913d5462017e52692 < f217b6c1e28ed0b353634ce4d92a155b80bd1671affected
LinuxLinuxb8d47d8813055ce38c0d2ad913d5462017e52692 < bb509a6ffed2c8b0950f637ab5779aa818ed1596affected
LinuxLinux5.8affected
LinuxLinux0 < 5.8unaffected
LinuxLinux5.10.70 <= 5.10.*unaffected
LinuxLinux5.14.9 <= 5.14.*unaffected
LinuxLinux5.15 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References