CVE-2021-47654

Summary

In the Linux kernel, the following vulnerability has been resolved:

samples/landlock: Fix path_list memory leak

Clang static analysis reports this error

sandboxer.c:134:8: warning: Potential leak of memory pointed to by 'path_list' ret = 0; ^ path_list is allocated in parse_path() but never freed.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxba84b0bf5a164f0f523656c1e37568c30f3f3303 < 20fbf100f84b9aeb9c91421abe1927bc152bc32baffected
LinuxLinuxba84b0bf5a164f0f523656c1e37568c30f3f3303 < 49b0d8bf05809df5f87e5c03e26d74bdfdab4571affected
LinuxLinuxba84b0bf5a164f0f523656c1e37568c30f3f3303 < 017196730299ccd6eed24bbfabed8af4ffd81530affected
LinuxLinuxba84b0bf5a164f0f523656c1e37568c30f3f3303 < 66b513b7c64a7290c1fbb88e657f7cece992e131affected
LinuxLinux5.13affected
LinuxLinux0 < 5.13unaffected
LinuxLinux5.15.33 <= 5.15.*unaffected
LinuxLinux5.16.19 <= 5.16.*unaffected
LinuxLinux5.17.2 <= 5.17.*unaffected
LinuxLinux5.18 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References