CVE-2021-46924
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
27/02/2024
Last modified:
10/04/2024
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
NFC: st21nfca: Fix memory leak in device probe and remove<br />
<br />
&#39;phy->pending_skb&#39; is alloced when device probe, but forgot to free<br />
in the error handling path and remove path, this cause memory leak<br />
as follows:<br />
<br />
unreferenced object 0xffff88800bc06800 (size 512):<br />
comm "8", pid 11775, jiffies 4295159829 (age 9.032s)<br />
hex dump (first 32 bytes):<br />
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................<br />
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................<br />
backtrace:<br />
[] __kmalloc_node_track_caller+0x1ed/0x450<br />
[] kmalloc_reserve+0x37/0xd0<br />
[] __alloc_skb+0x124/0x380<br />
[] st21nfca_hci_i2c_probe+0x170/0x8f2<br />
<br />
Fix it by freeing &#39;pending_skb&#39; in error and remove.
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 3.16.0 (including) | 4.14.261 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 4.15.0 (including) | 4.19.224 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 4.20.0 (including) | 5.4.170 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.5.0 (including) | 5.10.90 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.11.0 (including) | 5.15.13 (excluding) |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- https://git.kernel.org/stable/c/1b9dadba502234eea7244879b8d5d126bfaf9f0c
- https://git.kernel.org/stable/c/1cd4063dbc91cf7965d73a6a3855e2028cd4613b
- https://git.kernel.org/stable/c/238920381b8925d070d32d73cd9ce52ab29896fe
- https://git.kernel.org/stable/c/38c3e320e7ff46f2dc67bc5045333e63d9f8918d
- https://git.kernel.org/stable/c/a1e0080a35a16ce3808f7040fe0c3a8fdb052349
- https://git.kernel.org/stable/c/e553265ea56482da5700f56319fda9ff53e7dcb4



