CVE-2021-47425

Katalog CVE

CVSS 5.5 · Medium EPSS 0,23%

Kerentanan Missing Release of Memory after Effective Lifetime pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: i2c: acpi: fix resource leak in reconfiguration device addition acpi_i2c_find_adapter_by_handle() calls bus_find_device() which takes a reference on the adapter which is never released which will result in a reference count leak and render the adapter unremovable. Make sure to put the adapter after creating the client in the same manner that we do for OF. [wsa: fixed title]

Rincian

Terbit di NVD

21 Mei 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-401: Missing Release of Memory after Effective Lifetime

EPSS (30 hari)

0,23% peluang dieksploitasi; lebih tinggi dari 13,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/3d9d458a8aaafa47268ea4f1b4114a9f12927989 patch
• https://git.kernel.org/stable/c/60bacf259e8c2eb2324f3e13275200baaee9494b patch
• https://git.kernel.org/stable/c/6558b646ce1c2a872fe1c2c7cb116f05a2c1950f patch
• https://git.kernel.org/stable/c/90f1077c9184ec2ae9989e4642f211263f301694 patch
• https://git.kernel.org/stable/c/b8090a84d7758b929d348bafbd86bb7a10c5fb63 patch
• https://git.kernel.org/stable/c/f86de018fd7a24ee07372d55ffa7824f0c674a95 patch