5.5

CVE-2021-46985

ACPI: scan: Fix a memory leak in an error handling path

In the Linux kernel, the following vulnerability has been resolved:

ACPI: scan: Fix a memory leak in an error handling path

If 'acpi_device_set_name()' fails, we must free
'acpi_device_bus_id->bus_id' or there is a (potential) memory leak.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 4.9.264 < 4.9.269
Linux ≫ Linux Kernel Version >= 4.14.228 < 4.14.233
Linux ≫ Linux Kernel Version >= 4.19.184 < 4.19.191
Linux ≫ Linux Kernel Version >= 5.4.109 < 5.4.120
Linux ≫ Linux Kernel Version >= 5.10.27 < 5.10.38
Linux ≫ Linux Kernel Version >= 5.11.11 < 5.11.22
Linux ≫ Linux Kernel Version >= 5.12 < 5.12.5
Linux ≫ Linux Kernel Version5.13 Updaterc1
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.25% 0.159
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-401 Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

https://git.kernel.org/stable/c/0c8bd174f0fc131bc9dfab35cd8784f59045da87
Patch
https://git.kernel.org/stable/c/5ab9857dde7c3ea3faef6b128d718cf8ba98721b
Patch
https://git.kernel.org/stable/c/6901a4f795e0e8d65ae779cb37fc22e0bf294712
Patch
https://git.kernel.org/stable/c/69cc821e89ce572884548ac54c4f80eec7a837a5
Patch
https://git.kernel.org/stable/c/a7e17a8d421ae23c920240625b4413c7b94d94a4
Patch
https://git.kernel.org/stable/c/c5c8f6ffc942cf42f990f22e35bcf4cbe9d8c2fb
Patch
https://git.kernel.org/stable/c/dafd4c0b5e835db020cff11c74b4af9493a58e72
Patch
https://git.kernel.org/stable/c/e2381174daeae0ca35eddffef02dcc8de8c1ef8a
Patch