PT-2021-8012 · Linux+1 · Linux Kernel+1

Meng Li · Published 2021-03-10 · Updated 2024-12-10 · CVE-2021-47058

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a memory leak in the Linux kernel's regmap function. Specifically, the regmap debugfs exit() function frees the debugfs name but it is not created again due to an if condition introduced by an upstream commit. This can lead to a memory leak when calling regmap attach dev. The vulnerability may allow an attacker to disclose protected information or cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Leak

Use After Free

Weakness Enumeration

CWE-401

CWE-416

Related Identifiers

BDU:2024-01828

CVE-2021-47058

OPENSUSE-SU-2024_1489-1

SUSE-SU-2024:1454-1

SUSE-SU-2024:1465-1

SUSE-SU-2024:1489-1

Affected Products

Linux Kernel

Suse

References · 353

• https://git.kernel.org/stable/c/e41a962f82e7afb5b1ee644f48ad0b3aee656268 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:1489-1 · Vendor Advisory
• https://git.kernel.org/stable/c/c764e375ae647832de1ee73d43a4bb3ef8a8f43d · Patch
• https://cve.org/CVERecord?id=CVE-2021-47058 · Security Note
• https://git.kernel.org/stable/c/d8897f7b2283a500666c85ef06e820df38ed7b52 · Patch
• https://git.kernel.org/stable/c/b9e569ae1da3a113b3acee8703c94777fd20938a · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-47058 · Vendor Advisory
• https://git.kernel.org/stable/c/eb949f891226c012138ffd9df90d1e509f428ae6 · Patch
• https://osv.dev/vulnerability/CVE-2021-47058 · Vendor Advisory
• https://git.kernel.org/stable/c/2dc1554d5f0fdaf47cc5bea442b84b9226fea867 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:1465-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-47058 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-47058 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2021-47058 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:1454-1 · Vendor Advisory