CVE-2021-46924

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
27/02/2024
Last modified:
10/04/2024

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> NFC: st21nfca: Fix memory leak in device probe and remove<br /> <br /> &amp;#39;phy-&gt;pending_skb&amp;#39; is alloced when device probe, but forgot to free<br /> in the error handling path and remove path, this cause memory leak<br /> as follows:<br /> <br /> unreferenced object 0xffff88800bc06800 (size 512):<br /> comm "8", pid 11775, jiffies 4295159829 (age 9.032s)<br /> hex dump (first 32 bytes):<br /> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................<br /> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................<br /> backtrace:<br /> [] __kmalloc_node_track_caller+0x1ed/0x450<br /> [] kmalloc_reserve+0x37/0xd0<br /> [] __alloc_skb+0x124/0x380<br /> [] st21nfca_hci_i2c_probe+0x170/0x8f2<br /> <br /> Fix it by freeing &amp;#39;pending_skb&amp;#39; in error and remove.

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 3.16.0 (including) 4.14.261 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 4.15.0 (including) 4.19.224 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 4.20.0 (including) 5.4.170 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.5.0 (including) 5.10.90 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.11.0 (including) 5.15.13 (excluding)