CVE-2021-47671
published 2025-04-17CVE-2021-47671: In the Linux kernel, the following vulnerability has been resolved: can: etas_es58x: es58x_rx_err_msg(): fix memory leak in error path In es58x_rx_err_msg()…
PriorityP46low3.3CVSS 3.1
AVLACLPRLUINSUCNINAL
EPSS
0.17%
6.6th percentile
In the Linux kernel, the following vulnerability has been resolved:
can: etas_es58x: es58x_rx_err_msg(): fix memory leak in error path
In es58x_rx_err_msg(), if can->do_set_mode() fails, the function
directly returns without calling netif_rx(skb). This means that the
skb previously allocated by alloc_can_err_skb() is not freed. In other
terms, this is a memory leak.
This patch simply removes the return statement in the error branch and
let the function continue.
Issue was found with GCC -fanalyzer, please follow the link below for
details.
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.15.3-1 (bookworm) | linux 5.15.3-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 8537257874e949a59c834cecfd5a063e11b64b0b < 4f389e1276a5389c92cef860c9fde8e1c802a871 | 4f389e1276a5389c92cef860c9fde8e1c802a871 |
| linux | linux | >= 8537257874e949a59c834cecfd5a063e11b64b0b < 7eb0881aec26099089f12ae850aebd93190b1dfe | 7eb0881aec26099089f12ae850aebd93190b1dfe |
| linux | linux | >= 8537257874e949a59c834cecfd5a063e11b64b0b < d9447f768bc8c60623e4bb3ce65b8f4654d33a50 | d9447f768bc8c60623e4bb3ce65b8f4654d33a50 |
| linux | linux_kernel | >= 0 < 5.15.3-1 | 5.15.3-1 |
| linux | linux_kernel | >= 0 < 5.15.3-1 | 5.15.3-1 |
| linux | linux_kernel | >= 0 < 5.15.3-1 | 5.15.3-1 |
| linux | linux_kernel | >= 5.13 < 5.14.19 | 5.14.19 |
| linux | linux_kernel | >= 5.15 < 5.15.3 | 5.15.3 |
CVSS provenance
nvdv3.13.3LOWCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
osv3.3LOW
vendor_debian3.3LOW
vendor_redhat3.3LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-fgr8-gcxj-6pq5: In the Linux kernel, the following vulnerability has been resolved:
can: etas_es58x: es58x_rx_err_msg(): fix memory leak in error path
In es58x_rx_e
ghsa_unreviewed·2025-04-17
CVE-2021-47671 [LOW] CWE-401 GHSA-fgr8-gcxj-6pq5: In the Linux kernel, the following vulnerability has been resolved:
can: etas_es58x: es58x_rx_err_msg(): fix memory leak in error path
In es58x_rx_e
In the Linux kernel, the following vulnerability has been resolved:
can: etas_es58x: es58x_rx_err_msg(): fix memory leak in error path
In es58x_rx_err_msg(), if can->do_set_mode() fails, the function
directly returns without calling netif_rx(skb). This means that the
skb previously allocated by alloc_can_err_skb() is not freed. In other
terms, this is a memory leak.
This patch simply removes the return statement in the error branch and
let the function continue.
Issue was found with GCC -fanalyzer, please follow the link below for
details.
OSV
CVE-2021-47671: In the Linux kernel, the following vulnerability has been resolved: can: etas_es58x: es58x_rx_err_msg(): fix memory leak in error path In es58x_rx_err
osv·2025-04-17·CVSS 3.3
CVE-2021-47671 [LOW] CVE-2021-47671: In the Linux kernel, the following vulnerability has been resolved: can: etas_es58x: es58x_rx_err_msg(): fix memory leak in error path In es58x_rx_err
In the Linux kernel, the following vulnerability has been resolved: can: etas_es58x: es58x_rx_err_msg(): fix memory leak in error path In es58x_rx_err_msg(), if can->do_set_mode() fails, the function directly returns without calling netif_rx(skb). This means that the skb previously allocated by alloc_can_err_skb() is not freed. In other terms, this is a memory leak. This patch simply removes the return statement in the error branch and let the function continue. Issue was found with GCC -fanalyzer, please follow the link below for details.
Red Hat
kernel: can: etas_es58x: es58x_rx_err_msg(): fix memory leak in error path
vendor_redhat·2025-04-17·CVSS 3.3
CVE-2021-47671 [LOW] CWE-401 kernel: can: etas_es58x: es58x_rx_err_msg(): fix memory leak in error path
kernel: can: etas_es58x: es58x_rx_err_msg(): fix memory leak in error path
In the Linux kernel, the following vulnerability has been resolved:
can: etas_es58x: es58x_rx_err_msg(): fix memory leak in error path
In es58x_rx_err_msg(), if can->do_set_mode() fails, the function
directly returns without calling netif_rx(skb). This means that the
skb previously allocated by alloc_can_err_skb() is not freed. In other
terms, this is a memory leak.
This patch simply removes the return statement in the error branch and
let the function continue.
Issue was found with GCC -fanalyzer, please follow the link below for
details.
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not aff
Debian
CVE-2021-47671: linux - In the Linux kernel, the following vulnerability has been resolved: can: etas_e...
vendor_debian·2021·CVSS 3.3
CVE-2021-47671 [LOW] CVE-2021-47671: linux - In the Linux kernel, the following vulnerability has been resolved: can: etas_e...
In the Linux kernel, the following vulnerability has been resolved: can: etas_es58x: es58x_rx_err_msg(): fix memory leak in error path In es58x_rx_err_msg(), if can->do_set_mode() fails, the function directly returns without calling netif_rx(skb). This means that the skb previously allocated by alloc_can_err_skb() is not freed. In other terms, this is a memory leak. This patch simply removes the return statement in the error branch and let the function continue. Issue was found with GCC -fanalyzer, please follow the link below for details.
Scope: local
bookworm: resolved (fixed in 5.15.3-1)
bullseye: resolved
forky: resolved (fixed in 5.15.3-1)
sid: resolved (fixed in 5.15.3-1)
trixie: resolved (fixed in 5.15.3-1)
No detection rules found.
No public exploits indexed.
2025-04-17
Published