CVE-2021-47150

Katalog CVE

CVSS 5.5 · Medium EPSS 0,22%

Kerentanan Missing Release of Memory after Effective Lifetime pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: net: fec: fix the potential memory leak in fec_enet_init() If the memory allocated for cbd_base is failed, it should free the memory allocated for the queues, otherwise it causes memory leak. And if the memory allocated for the queues is failed, it can return error directly.

Rincian

Terbit di NVD

25 Maret 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-401: Missing Release of Memory after Effective Lifetime

EPSS (30 hari)

0,22% peluang dieksploitasi; lebih tinggi dari 12,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/15102886bc8f5f29daaadf2d925591d564c17e9f patch
• https://git.kernel.org/stable/c/20255d41ac560397b6a07d8d87dcc5e2efc7672a patch
• https://git.kernel.org/stable/c/32a1777fd113335c3f70dc445dffee0ad1c6870f patch
• https://git.kernel.org/stable/c/619fee9eb13b5d29e4267cb394645608088c28a8 patch
• https://git.kernel.org/stable/c/8ee7ef4a57a9e1228b6f345aaa70aa8951c7e9cd patch