cbcvebase.
CVE-2021-46962
published 2024-02-27

CVE-2021-46962: In the Linux kernel, the following vulnerability has been resolved: mmc: uniphier-sd: Fix a resource leak in the remove function A 'tmio_mmc_host_free()' call…

PriorityP421medium5.5CVSS 3.1
AVLACLPRLUINSUCHINAN
EPSS
0.23%
13.7th percentile
In the Linux kernel, the following vulnerability has been resolved: mmc: uniphier-sd: Fix a resource leak in the remove function A 'tmio_mmc_host_free()' call is missing in the remove function, in order to balance a 'tmio_mmc_host_alloc()' call in the probe. This is done in the error handling path of the probe, but not in the remove function. Add the missing call.

Affected

15 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 5.10.38-1 (bookworm)linux 5.10.38-1 (bookworm)
linuxlinux——
linuxlinux>= 3fd784f745dd1747863775a99ec749619ee6759c < 0d8941b9b2d3e7b3481fdf43b1a6189d162175b70d8941b9b2d3e7b3481fdf43b1a6189d162175b7
linuxlinux>= 3fd784f745dd1747863775a99ec749619ee6759c < 25ac6ce65f1ab458982d15ec1caf441acd37106a25ac6ce65f1ab458982d15ec1caf441acd37106a
linuxlinux>= 3fd784f745dd1747863775a99ec749619ee6759c < ebe0f12cf4c044f812c6d17011531582f9ac8bb3ebe0f12cf4c044f812c6d17011531582f9ac8bb3
linuxlinux>= 3fd784f745dd1747863775a99ec749619ee6759c < d6e7fda496978f2763413b5523557b38dc2bf6c2d6e7fda496978f2763413b5523557b38dc2bf6c2
linuxlinux>= 3fd784f745dd1747863775a99ec749619ee6759c < e29c84857e2d51aa017ce04284b962742fb97d9ee29c84857e2d51aa017ce04284b962742fb97d9e
linuxlinux_kernel>= 0 < 5.10.38-15.10.38-1
linuxlinux_kernel>= 0 < 5.10.38-15.10.38-1
linuxlinux_kernel>= 0 < 5.10.38-15.10.38-1
linuxlinux_kernel>= 0 < 5.10.38-15.10.38-1
linuxlinux_kernel>= 4.20 < 5.4.1185.4.118
linuxlinux_kernel>= 5.11 < 5.11.205.11.20
linuxlinux_kernel>= 5.12 < 5.12.35.12.3
linuxlinux_kernel>= 5.5 < 5.10.365.10.36

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.