CVE-2021-46985 - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: ACPI: scan: Fix a memory leak in an error handling path If 'acpi_device_set_name()' fails, we must free 'acpi_device_bus_id->bus_id' or there is a (potential) memory leak.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/0c8bd174f0fc131bc9dfab35cd8784f59045da87
https://git.kernel.org/stable/c/5ab9857dde7c3ea3faef6b128d718cf8ba98721b
https://git.kernel.org/stable/c/6901a4f795e0e8d65ae779cb37fc22e0bf294712
https://git.kernel.org/stable/c/69cc821e89ce572884548ac54c4f80eec7a837a5
https://git.kernel.org/stable/c/a7e17a8d421ae23c920240625b4413c7b94d94a4
https://git.kernel.org/stable/c/c5c8f6ffc942cf42f990f22e35bcf4cbe9d8c2fb
https://git.kernel.org/stable/c/dafd4c0b5e835db020cff11c74b4af9493a58e72
https://git.kernel.org/stable/c/e2381174daeae0ca35eddffef02dcc8de8c1ef8a
https://lore.kernel.org/linux-cve-announce/2024022824-CVE-2021-46985-4dad@gregkh/T/#u
https://nvd.nist.gov/vuln/detail/CVE-2021-46985
https://www.cve.org/CVERecord?id=CVE-2021-46985

History

Wed, 11 Sep 2024 18:30:00 +0000

Type	Values Removed	Values Added
Metrics	ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Wed, 11 Sep 2024 13:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-02-28T08:13:13.454Z

Updated: 2024-09-11T17:33:40.036Z

Reserved: 2024-02-27T18:42:55.946Z

Link: CVE-2021-46985

Vulnrichment

Updated: 2024-08-04T05:24:38.487Z

NVD

Status : Awaiting Analysis

Published: 2024-02-28T09:15:37.497

Modified: 2024-02-28T14:06:45.783

Link: CVE-2021-46985

Redhat

Severity : Low

Publid Date: 2024-02-28T00:00:00Z

Links: CVE-2021-46985 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2021-46985", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-02-27T18:42:55.946Z", "datePublished": "2024-02-28T08:13:13.454Z", "dateUpdated": "2024-09-11T17:33:40.036Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-05-29T05:00:01.652Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nACPI: scan: Fix a memory leak in an error handling path\n\nIf 'acpi_device_set_name()' fails, we must free\n'acpi_device_bus_id->bus_id' or there is a (potential) memory leak."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/acpi/scan.c"], "versions": [{"version": "e5cdbe419004", "lessThan": "6901a4f795e0", "status": "affected", "versionType": "git"}, {"version": "717d9d88fbd9", "lessThan": "5ab9857dde7c", "status": "affected", "versionType": "git"}, {"version": "7385e438e1f3", "lessThan": "69cc821e89ce", "status": "affected", "versionType": "git"}, {"version": "bc0b1a2036dd", "lessThan": "dafd4c0b5e83", "status": "affected", "versionType": "git"}, {"version": "4a5891992c68", "lessThan": "e2381174daea", "status": "affected", "versionType": "git"}, {"version": "321dbe6c0b55", "lessThan": "c5c8f6ffc942", "status": "affected", "versionType": "git"}, {"version": "eb50aaf960e3", "lessThan": "a7e17a8d421a", "status": "affected", "versionType": "git"}, {"version": "eb50aaf960e3", "lessThan": "0c8bd174f0fc", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/acpi/scan.c"], "versions": [{"version": "5.12", "status": "affected"}, {"version": "0", "lessThan": "5.12", "status": "unaffected", "versionType": "custom"}, {"version": "4.9.269", "lessThanOrEqual": "4.9.*", "status": "unaffected", "versionType": "custom"}, {"version": "4.14.233", "lessThanOrEqual": "4.14.*", "status": "unaffected", "versionType": "custom"}, {"version": "4.19.191", "lessThanOrEqual": "4.19.*", "status": "unaffected", "versionType": "custom"}, {"version": "5.4.120", "lessThanOrEqual": "5.4.*", "status": "unaffected", "versionType": "custom"}, {"version": "5.10.38", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "custom"}, {"version": "5.11.22", "lessThanOrEqual": "5.11.*", "status": "unaffected", "versionType": "custom"}, {"version": "5.12.5", "lessThanOrEqual": "5.12.*", "status": "unaffected", "versionType": "custom"}, {"version": "5.13", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/6901a4f795e0e8d65ae779cb37fc22e0bf294712"}, {"url": "https://git.kernel.org/stable/c/5ab9857dde7c3ea3faef6b128d718cf8ba98721b"}, {"url": "https://git.kernel.org/stable/c/69cc821e89ce572884548ac54c4f80eec7a837a5"}, {"url": "https://git.kernel.org/stable/c/dafd4c0b5e835db020cff11c74b4af9493a58e72"}, {"url": "https://git.kernel.org/stable/c/e2381174daeae0ca35eddffef02dcc8de8c1ef8a"}, {"url": "https://git.kernel.org/stable/c/c5c8f6ffc942cf42f990f22e35bcf4cbe9d8c2fb"}, {"url": "https://git.kernel.org/stable/c/a7e17a8d421ae23c920240625b4413c7b94d94a4"}, {"url": "https://git.kernel.org/stable/c/0c8bd174f0fc131bc9dfab35cd8784f59045da87"}], "title": "ACPI: scan: Fix a memory leak in an error handling path", "x_generator": {"engine": "bippy-a5840b7849dd"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T05:24:38.487Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/6901a4f795e0e8d65ae779cb37fc22e0bf294712", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/5ab9857dde7c3ea3faef6b128d718cf8ba98721b", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/69cc821e89ce572884548ac54c4f80eec7a837a5", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/dafd4c0b5e835db020cff11c74b4af9493a58e72", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/e2381174daeae0ca35eddffef02dcc8de8c1ef8a", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/c5c8f6ffc942cf42f990f22e35bcf4cbe9d8c2fb", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/a7e17a8d421ae23c920240625b4413c7b94d94a4", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/0c8bd174f0fc131bc9dfab35cd8784f59045da87", "tags": ["x_transferred"]}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2021-46985", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-09-10T16:01:08.493221Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-11T17:33:40.036Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/6901a4f795e0e8d65ae779cb37fc22e0bf294712", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/5ab9857dde7c3ea3faef6b128d718cf8ba98721b", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/69cc821e89ce572884548ac54c4f80eec7a837a5", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/dafd4c0b5e835db020cff11c74b4af9493a58e72", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/e2381174daeae0ca35eddffef02dcc8de8c1ef8a", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/c5c8f6ffc942cf42f990f22e35bcf4cbe9d8c2fb", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/a7e17a8d421ae23c920240625b4413c7b94d94a4", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/0c8bd174f0fc131bc9dfab35cd8784f59045da87", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T05:24:38.487Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2021-46985", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-09-10T16:01:08.493221Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-11T12:42:17.962Z"}}], "cna": {"title": "ACPI: scan: Fix a memory leak in an error handling path", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "e5cdbe419004", "lessThan": "6901a4f795e0", "versionType": "git"}, {"status": "affected", "version": "717d9d88fbd9", "lessThan": "5ab9857dde7c", "versionType": "git"}, {"status": "affected", "version": "7385e438e1f3", "lessThan": "69cc821e89ce", "versionType": "git"}, {"status": "affected", "version": "bc0b1a2036dd", "lessThan": "dafd4c0b5e83", "versionType": "git"}, {"status": "affected", "version": "4a5891992c68", "lessThan": "e2381174daea", "versionType": "git"}, {"status": "affected", "version": "321dbe6c0b55", "lessThan": "c5c8f6ffc942", "versionType": "git"}, {"status": "affected", "version": "eb50aaf960e3", "lessThan": "a7e17a8d421a", "versionType": "git"}, {"status": "affected", "version": "eb50aaf960e3", "lessThan": "0c8bd174f0fc", "versionType": "git"}], "programFiles": ["drivers/acpi/scan.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "5.12"}, {"status": "unaffected", "version": "0", "lessThan": "5.12", "versionType": "custom"}, {"status": "unaffected", "version": "4.9.269", "versionType": "custom", "lessThanOrEqual": "4.9.*"}, {"status": "unaffected", "version": "4.14.233", "versionType": "custom", "lessThanOrEqual": "4.14.*"}, {"status": "unaffected", "version": "4.19.191", "versionType": "custom", "lessThanOrEqual": "4.19.*"}, {"status": "unaffected", "version": "5.4.120", "versionType": "custom", "lessThanOrEqual": "5.4.*"}, {"status": "unaffected", "version": "5.10.38", "versionType": "custom", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.11.22", "versionType": "custom", "lessThanOrEqual": "5.11.*"}, {"status": "unaffected", "version": "5.12.5", "versionType": "custom", "lessThanOrEqual": "5.12.*"}, {"status": "unaffected", "version": "5.13", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/acpi/scan.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/6901a4f795e0e8d65ae779cb37fc22e0bf294712"}, {"url": "https://git.kernel.org/stable/c/5ab9857dde7c3ea3faef6b128d718cf8ba98721b"}, {"url": "https://git.kernel.org/stable/c/69cc821e89ce572884548ac54c4f80eec7a837a5"}, {"url": "https://git.kernel.org/stable/c/dafd4c0b5e835db020cff11c74b4af9493a58e72"}, {"url": "https://git.kernel.org/stable/c/e2381174daeae0ca35eddffef02dcc8de8c1ef8a"}, {"url": "https://git.kernel.org/stable/c/c5c8f6ffc942cf42f990f22e35bcf4cbe9d8c2fb"}, {"url": "https://git.kernel.org/stable/c/a7e17a8d421ae23c920240625b4413c7b94d94a4"}, {"url": "https://git.kernel.org/stable/c/0c8bd174f0fc131bc9dfab35cd8784f59045da87"}], "x_generator": {"engine": "bippy-a5840b7849dd"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nACPI: scan: Fix a memory leak in an error handling path\n\nIf 'acpi_device_set_name()' fails, we must free\n'acpi_device_bus_id->bus_id' or there is a (potential) memory leak."}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-05-29T05:00:01.652Z"}}}, "cveMetadata": {"cveId": "CVE-2021-46985", "state": "PUBLISHED", "dateUpdated": "2024-09-11T17:33:40.036Z", "dateReserved": "2024-02-27T18:42:55.946Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-02-28T08:13:13.454Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}