PT-2024-11306 · Linux+2 · Linux Kernel+2
Published
2021-06-24
·
Updated
2024-06-24
·
CVE-2021-47305
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to a fence leak in the dma-buf/sync file component of the Linux kernel. Each
add fence() call performs a dma fence get() on the relevant fence, but in the error path, dma fence put() was not being called, resulting in leaked fences. Additionally, in the krealloc array failure case, the fences array was not being freed. To resolve this, it is ensured that i and fences are always zero-initialized, and dma fence put() is called on all fences, and kfree(fences) is performed on every error path.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Assertion Failure
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Suse