PT-2024-11092 · Linux · Linux Kernel

Published 2021-05-10 · Updated 2024-12-06 · CVE-2021-46985

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak has been identified in the Linux kernel's ACPI scan functionality. The issue arises when the acpi device set name() function fails, resulting in a potential memory leak if acpi device bus id->bus id is not properly freed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

BDU:2025-05322

CVE-2021-46985

Affected Products

Linux Kernel

References · 30

• https://git.kernel.org/stable/c/a7e17a8d421ae23c920240625b4413c7b94d94a4 · Patch
• https://git.kernel.org/stable/c/0c8bd174f0fc131bc9dfab35cd8784f59045da87 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-46985 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-46985 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-46985 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2021-46985 · Vendor Advisory
• https://git.kernel.org/stable/c/e2381174daeae0ca35eddffef02dcc8de8c1ef8a · Patch
• https://osv.dev/vulnerability/CVE-2021-46985 · Vendor Advisory
• https://git.kernel.org/stable/c/c5c8f6ffc942cf42f990f22e35bcf4cbe9d8c2fb · Patch
• https://bdu.fstec.ru/vul/2025-05322 · Security Note
• https://git.kernel.org/stable/c/69cc821e89ce572884548ac54c4f80eec7a837a5 · Patch
• https://git.kernel.org/stable/c/6901a4f795e0e8d65ae779cb37fc22e0bf294712 · Patch
• https://git.kernel.org/stable/c/dafd4c0b5e835db020cff11c74b4af9493a58e72 · Patch
• https://ubuntu.com/security/CVE-2021-46985 · Vendor Advisory
• https://git.kernel.org/stable/c/5ab9857dde7c3ea3faef6b128d718cf8ba98721b · Patch