PT-2021-8072 · Linux+4 · Linux Kernel+4
Hulk Robot
·
Published
2021-12-28
·
Updated
2024-08-21
·
CVE-2021-46924
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to a memory leak in the Linux kernel's NFC component, specifically in the st21nfca module. The memory leak occurs when the
phy->pending skb is allocated during device probe but not freed in the error handling path and remove path. This causes an unreferenced object, leading to a memory leak. The backtrace indicates the involvement of functions such as kmalloc node track caller, kmalloc reserve, alloc skb, and st21nfca hci i2c probe. The memory leak can be fixed by freeing the pending skb in error and remove.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Memory Leak
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Red Os
Suse
Ubuntu