CVE-2021-46924

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-46924
In the Linux kernel, the following vulnerability has been resolved: NFC: st21nfca: Fix memory leak in device probe and remove 'phy->pending_skb' is alloced when device probe, but forgot to free in the error handling path and remove path, this cause memory leak as follows: unreferenced object 0xffff88800bc06800 (size 512): comm "8", pid 11775, jiffies 4295159829 (age 9.032s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<00000000d66c09ce>] __kmalloc_node_track_caller+0x1ed/0x450 [<00000000c93382b3>] kmalloc_reserve+0x37/0xd0 [<000000005fea522c>] __alloc_skb+0x124/0x380 [<0000000019f29f9a>] st21nfca_hci_i2c_probe+0x170/0x8f2 Fix it by freeing 'pending_skb' in error and remove.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/1b9dadba502234eea7244879b8d5d126bfaf9f0c Patch
https://git.kernel.org/stable/c/1cd4063dbc91cf7965d73a6a3855e2028cd4613b Patch
https://git.kernel.org/stable/c/238920381b8925d070d32d73cd9ce52ab29896fe Patch
https://git.kernel.org/stable/c/38c3e320e7ff46f2dc67bc5045333e63d9f8918d Patch
https://git.kernel.org/stable/c/a1e0080a35a16ce3808f7040fe0c3a8fdb052349 Patch
https://git.kernel.org/stable/c/e553265ea56482da5700f56319fda9ff53e7dcb4 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

10 Apr 2024, 15:23

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux linux Kernel
Linux
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE CWE-401
References () https://git.kernel.org/stable/c/1b9dadba502234eea7244879b8d5d126bfaf9f0c - () https://git.kernel.org/stable/c/1b9dadba502234eea7244879b8d5d126bfaf9f0c - Patch
References () https://git.kernel.org/stable/c/1cd4063dbc91cf7965d73a6a3855e2028cd4613b - () https://git.kernel.org/stable/c/1cd4063dbc91cf7965d73a6a3855e2028cd4613b - Patch
References () https://git.kernel.org/stable/c/238920381b8925d070d32d73cd9ce52ab29896fe - () https://git.kernel.org/stable/c/238920381b8925d070d32d73cd9ce52ab29896fe - Patch
References () https://git.kernel.org/stable/c/38c3e320e7ff46f2dc67bc5045333e63d9f8918d - () https://git.kernel.org/stable/c/38c3e320e7ff46f2dc67bc5045333e63d9f8918d - Patch
References () https://git.kernel.org/stable/c/a1e0080a35a16ce3808f7040fe0c3a8fdb052349 - () https://git.kernel.org/stable/c/a1e0080a35a16ce3808f7040fe0c3a8fdb052349 - Patch
References () https://git.kernel.org/stable/c/e553265ea56482da5700f56319fda9ff53e7dcb4 - () https://git.kernel.org/stable/c/e553265ea56482da5700f56319fda9ff53e7dcb4 - Patch

27 Feb 2024, 14:20

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: NFC: st21nfca: corrige la pérdida de memoria en la sonda del dispositivo y elimina 'phy-&gt;pending_skb' cuando se asigna la sonda del dispositivo, pero olvidó liberarla en la ruta de manejo de errores y eliminar la ruta, esto causa pérdida de memoria de la siguiente manera: objeto sin referencia 0xffff88800bc06800 (tamaño 512): comunicación "8", pid 11775, santiago 4295159829 (edad 9.032 s) volcado hexadecimal (primeros 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................. backtrace: [&lt;00000000d66c09ce&gt;] __kmalloc_node_track_caller+0x1ed/0x450 [&lt;00000000c93382b3&gt;] kmalloc_reserve+0x37/0xd0 [&lt;000000005fea522c&gt;] __alloc_skb+0x124/0x380 [ &lt;0000000019f29f9a&gt;] st21nfca_hci_i2c_probe+0x170/0x8f2 Solucionarlo liberando 'pending_skb' por error y elimínelo.

27 Feb 2024, 10:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-02-27 10:15

Updated : 2024-04-10 15:23

NVD link : CVE-2021-46924

Mitre link : CVE-2021-46924

CVE.ORG link : CVE-2021-46924

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime