Wind River Support Network

HomeDefectsLIN1021-7875
Fixed

LIN1021-7875 : Security Advisory - linux - CVE-2021-47171

Created: Mar 25, 2024    Updated: May 24, 2024
Resolved Date: May 23, 2024
Found In Version: 10.21.20.1
Fix Version: 10.21.20.21
Severity: Standard
Applicable for: Wind River Linux LTS 21
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:

net: usb: fix memory leak in smsc75xx_bind

Syzbot reported memory leak in smsc75xx_bind().
The problem was is non-freed memory in case of
errors after memory allocation.

backtrace:
  <ffffffff84245b62>] kmalloc include/linux/slab.h:556 [inline]
  [<ffffffff84245b62>] kzalloc include/linux/slab.h:686 [inline]
  [<ffffffff84245b62>] smsc75xx_bind+0x7a/0x334 drivers/net/usb/smsc75xx.c:1460
  [<ffffffff82b5b2e6>] usbnet_probe+0x3b6/0xc30 drivers/net/usb/usbnet.c:1728

CREATE(Triage):(User=admin) [CVE-2021-47171 (https://nvd.nist.gov/vuln/detail/CVE-2021-47171)

CVEs


Live chat
Online