CVE-2021-47305

Katalog CVE

CVSS 5.5 · Medium EPSS 0,24%

Kerentanan Reachable Assertion pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: dma-buf/sync_file: Don't leak fences on merge failure Each add_fence() call does a dma_fence_get() on the relevant fence. In the error path, we weren't calling dma_fence_put() so all those fences got leaked. Also, in the krealloc_array failure case, we weren't freeing the fences array. Instead, ensure that i and fences are always zero-initialized and dma_fence_put() all the fences and kfree(fences) on every error path.

Rincian

Terbit di NVD

21 Mei 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-617: Reachable Assertion

EPSS (30 hari)

0,24% peluang dieksploitasi; lebih tinggi dari 13,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/0d514185ae792d3a1903c8e1a83899aa996705ce patch
• https://git.kernel.org/stable/c/19edcd97727aae9362444a859a24d99a8730cb27 patch
• https://git.kernel.org/stable/c/19f51c2529339280d2c8c6427cd3e21ddf1ac3f8 patch
• https://git.kernel.org/stable/c/41f45e91c92c8480242ea448d54e28c753b13902 patch
• https://git.kernel.org/stable/c/e0355a0ad31a1d677b2a4514206de4902bd550e8 patch
• https://git.kernel.org/stable/c/ffe000217c5068c5da07ccb1c0f8cce7ad767435 patch