CVE-2021-47455

Medium

Description

In the Linux kernel, the following vulnerability has been resolved: ptp: Fix possible memory leak in ptp_clock_register() I got memory leak as follows when doing fault injection test: unreferenced object 0xffff88800906c618 (size 8): comm "i2c-idt82p33931", pid 4421, jiffies 4294948083 (age 13.188s) hex dump (first 8 bytes): 70 74 70 30 00 00 00 00 ptp0.... backtrace: [<00000000312ed458>] __kmalloc_track_caller+0x19f/0x3a0 [<0000000079f6e2ff>] kvasprintf+0xb5/0x150 [<0000000026aae54f>] kvasprintf_const+0x60/0x190 [<00000000f323a5f7>] kobject_set_name_vargs+0x56/0x150 [<000000004e35abdd>] dev_set_name+0xc0/0x100 [<00000000f20cfe25>] ptp_clock_register+0x9f4/0xd30 [ptp] [<000000008bb9f0de>] idt82p33_probe.cold+0x8b6/0x1561 [ptp_idt82p33] When posix_clock_register() returns an error, the name allocated in dev_set_name() will be leaked, the put_device() should be used to give up the device reference, then the name will be freed in kobject_cleanup() and other memory will be freed in ptp_clock_release().

SeverityMedium
CVSS5.5
Exploit probability—
ProductLinux Kernel
PublishedMay 22, 2024
First seenMay 22, 2024

How to fix

Update
  • linux linux_kernel3.17, 4.5, 4.10, 4.15, 4.20, 5.14.15 or later

Affected products

ProductAffected versionsFixed in
linux linux_kernel3.16.83 ≤ v < 3.17, 4.4.224 ≤ v < 4.5, 4.9.224 ≤ v < 4.10, 4.14.162 ≤ v < 4.15, 4.19.93 ≤ v < 4.20, 5.4.8 ≤ v < 5.14.15, 5.153.17, 4.5, 4.10, 4.15, 4.20, 5.14.15

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2021-47455 · Linux Kernel · Dark Radar