PT-2024-11135 · Linux · Linux Kernel

Published 2021-03-22 · Updated 2025-01-09 · CVE-2021-47043

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue concerns resource leaks in the error path of the venus probe() function. If an error occurs after a successful of icc get() call, it must be undone to prevent leaks. Using devm of icc get() instead of of icc get() avoids the leak. The remove function should be updated accordingly, and the now unneeded icc put() calls should be removed.

Recommendations To resolve the issue, update the venus probe() function to use devm of icc get() instead of of icc get() to avoid resource leaks. Update the remove function to axe the now unneeded icc put() calls. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-402

Related Identifiers

BDU:2025-07256

CVE-2021-47043

Affected Products

Linux Kernel

References · 22

• https://git.kernel.org/stable/c/5a465c5391a856a0c1e9554964d660676c35d1b2 · Patch
• https://osv.dev/vulnerability/CVE-2021-47043 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2021-47043 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-47043 · Vendor Advisory
• https://git.kernel.org/stable/c/940d01eceb3a7866fbfca136a55a5625fc75a565 · Patch
• https://git.kernel.org/stable/c/00b68a7478343afdf83f30c43e64db5296057030 · Patch
• https://bdu.fstec.ru/vul/2025-07256 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-47043 · Security Note
• https://git.kernel.org/stable/c/711acdf0228dc71601247f28b56f13e850e395c8 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-47043 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-47043 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-47043 · Vendor Advisory
• https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.21 · Note
• https://git.linuxtesting.ru/pub/scm/linux/kernel/git/lvc/linux-stable.git/commit/?h=v5.10.176-lvc1&id=00b68a7478343afdf83f30c43e64db5296057030 · Note
• https://lore.kernel.org/linux-cve-announce/2024022838-CVE-2021-47043-cb3c@gregkh · Note