CVE-2021-47660

Summary

In the Linux kernel, the following vulnerability has been resolved:

fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'

All error handling paths lead to 'out' where many resources are freed.

Do it as well here instead of a direct return, otherwise 'log', 'ra' and 'log->one_page_buf' (at least) will leak.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxb46acd6a6a627d876898e1c84d3f84902264b445 < d8be98ab88250dc12a98efdb703792a537b0eac3affected
LinuxLinuxb46acd6a6a627d876898e1c84d3f84902264b445 < bc4a1d384a04c6dba9312e1421a9f9f7c03339a4affected
LinuxLinuxb46acd6a6a627d876898e1c84d3f84902264b445 < 2c97519ed6b4239594c58ddacf3d0d576cf070ccaffected
LinuxLinuxb46acd6a6a627d876898e1c84d3f84902264b445 < e589f9b7078e1c0191613cd736f598e81d2390deaffected
LinuxLinux5.15affected
LinuxLinux0 < 5.15unaffected
LinuxLinux5.15.46 <= 5.15.*unaffected
LinuxLinux5.17.14 <= 5.17.*unaffected
LinuxLinux5.18.3 <= 5.18.*unaffected
LinuxLinux5.19 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References