cbcvebase.
CVE-2021-47057
published 2024-02-29

CVE-2021-47057: In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ss - Fix memory leak of object d when dma_iv fails to map In the case where…

PriorityP415medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.22%
12.9th percentile
In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ss - Fix memory leak of object d when dma_iv fails to map In the case where the dma_iv mapping fails, the return error path leaks the memory allocated to object d. Fix this by adding a new error return label and jumping to this to ensure d is free'd before the return. Addresses-Coverity: ("Resource leak")

Affected

13 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 5.10.38-1 (bookworm)linux 5.10.38-1 (bookworm)
linuxlinux——
linuxlinux>= ac2614d721dea2ff273af19c6c5d508d58a2bb3e < 617ec35ed51f731a593ae7274228ef2cfc9cb781617ec35ed51f731a593ae7274228ef2cfc9cb781
linuxlinux>= ac2614d721dea2ff273af19c6c5d508d58a2bb3e < e1f2d739849c3239df1ea3f97d40bade4b808410e1f2d739849c3239df1ea3f97d40bade4b808410
linuxlinux>= ac2614d721dea2ff273af19c6c5d508d58a2bb3e < 6516cb852d704ff8d615de1f93cd443a99736c3d6516cb852d704ff8d615de1f93cd443a99736c3d
linuxlinux>= ac2614d721dea2ff273af19c6c5d508d58a2bb3e < 98b5ef3e97b16eaeeedb936f8bda3594ff84a70e98b5ef3e97b16eaeeedb936f8bda3594ff84a70e
linuxlinux_kernel>= 0 < 5.10.38-15.10.38-1
linuxlinux_kernel>= 0 < 5.10.38-15.10.38-1
linuxlinux_kernel>= 0 < 5.10.38-15.10.38-1
linuxlinux_kernel>= 0 < 5.10.38-15.10.38-1
linuxlinux_kernel>= 5.10 < 5.10.375.10.37
linuxlinux_kernel>= 5.11 < 5.11.215.11.21
linuxlinux_kernel>= 5.12 < 5.12.45.12.4

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.