PT-2024-11072 · Linux+2 · Linux Kernel+2

Published 2021-03-30 · Updated 2024-12-11 · CVE-2021-46962

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A resource leak has been identified in the Linux kernel, specifically in the remove function of the mmc: uniphier-sd module. The issue arises from a missing tmio mmc host free() call in the remove function, which is necessary to balance a tmio mmc host alloc() call in the probe. This missing call is present in the error handling path of the probe but not in the remove function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-402

Related Identifiers

BDU:2025-02985

CVE-2021-46962

OPENSUSE-SU-2024_1489-1

SUSE-SU-2024:1454-1

SUSE-SU-2024:1465-1

SUSE-SU-2024:1489-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 352

• https://osv.dev/vulnerability/UBUNTU-CVE-2021-46962 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-46962 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-46962 · Vendor Advisory
• https://git.kernel.org/stable/c/0d8941b9b2d3e7b3481fdf43b1a6189d162175b7 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:1454-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:1489-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-02985 · Security Note
• https://git.kernel.org/stable/c/d6e7fda496978f2763413b5523557b38dc2bf6c2 · Patch
• https://git.kernel.org/stable/c/25ac6ce65f1ab458982d15ec1caf441acd37106a · Patch
• https://cve.org/CVERecord?id=CVE-2021-46962 · Security Note
• https://osv.dev/vulnerability/CVE-2021-46962 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:1465-1 · Vendor Advisory
• https://git.kernel.org/stable/c/e29c84857e2d51aa017ce04284b962742fb97d9e · Patch
• https://git.kernel.org/stable/c/ebe0f12cf4c044f812c6d17011531582f9ac8bb3 · Patch
• https://security-tracker.debian.org/tracker/CVE-2021-46962 · Vendor Advisory