PT-2024-11328 · Linux+2 · Linux Kernel+2

Published 2021-06-02 · Updated 2025-04-02 · CVE-2021-47329

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a resource leak in the Linux kernel's megaraid sas driver. When the scsi add host() or megasas start aen() function fails during the PCI device probe, the driver does not properly clean up all allocated resources. This can lead to a resource leak.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

BDU:2025-07351

CVE-2021-47329

OESA-2024-1705

OPENSUSE-SU-2024_2185-1

SUSE-SU-2024:2010-1

SUSE-SU-2024:2185-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 475

• https://nvd.nist.gov/vuln/detail/CVE-2021-47254 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-35896 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-47478 · Security Note
• https://git.kernel.org/stable/c/0680db6f41920b2c91c7df3cc9cd5968701a6f74 · Patch
• https://git.kernel.org/stable/c/04b6b9ea80906e3b41ff120b45db31768947cf72 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-36954 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-36924 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-47460 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-47409 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-52754 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-35809 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-47329 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-47499 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-35984 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-47476 · Security Note