CVE-2021-47053 - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ss - Fix memory leak of pad It appears there are several failure return paths that don't seem to be free'ing pad. Fix these. Addresses-Coverity: ("Resource leak")

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/2c67a9333da9d0a3b87310e0d116b7c9070c7b00
https://git.kernel.org/stable/c/50274b01ac1689b1a3f6bc4b5b3dbf361a55dd3a
https://git.kernel.org/stable/c/c633e025bd04f54d7b33331cfcdb71354b08ce59
https://git.kernel.org/stable/c/d3d702084d125689edb2b9395c707e09b471352e
https://lore.kernel.org/linux-cve-announce/2024022841-CVE-2021-47053-c68d@gregkh/T/#u
https://nvd.nist.gov/vuln/detail/CVE-2021-47053
https://www.cve.org/CVERecord?id=CVE-2021-47053

History

No history.

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-02-28T08:13:54.711Z

Updated: 2024-08-04T05:24:39.873Z

Reserved: 2024-02-27T18:42:55.973Z

Link: CVE-2021-47053

Vulnrichment

Updated: 2024-08-04T05:24:39.873Z

NVD

Status : Awaiting Analysis

Published: 2024-02-28T09:15:40.607

Modified: 2024-02-28T14:06:45.783

Link: CVE-2021-47053

Redhat

Severity : Low

Publid Date: 2024-02-28T00:00:00Z

Links: CVE-2021-47053 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2021-47053", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-02-27T18:42:55.973Z", "datePublished": "2024-02-28T08:13:54.711Z", "dateUpdated": "2024-08-04T05:24:39.873Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-05-29T05:01:17.512Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: sun8i-ss - Fix memory leak of pad\n\nIt appears there are several failure return paths that don't seem\nto be free'ing pad. Fix these.\n\nAddresses-Coverity: (\"Resource leak\")"}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/crypto/allwinner/sun8i-ss/sun8i-ss-hash.c"], "versions": [{"version": "d9b45418a917", "lessThan": "2c67a9333da9", "status": "affected", "versionType": "git"}, {"version": "d9b45418a917", "lessThan": "c633e025bd04", "status": "affected", "versionType": "git"}, {"version": "d9b45418a917", "lessThan": "d3d702084d12", "status": "affected", "versionType": "git"}, {"version": "d9b45418a917", "lessThan": "50274b01ac16", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/crypto/allwinner/sun8i-ss/sun8i-ss-hash.c"], "versions": [{"version": "5.10", "status": "affected"}, {"version": "0", "lessThan": "5.10", "status": "unaffected", "versionType": "custom"}, {"version": "5.10.37", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "custom"}, {"version": "5.11.21", "lessThanOrEqual": "5.11.*", "status": "unaffected", "versionType": "custom"}, {"version": "5.12.4", "lessThanOrEqual": "5.12.*", "status": "unaffected", "versionType": "custom"}, {"version": "5.13", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/2c67a9333da9d0a3b87310e0d116b7c9070c7b00"}, {"url": "https://git.kernel.org/stable/c/c633e025bd04f54d7b33331cfcdb71354b08ce59"}, {"url": "https://git.kernel.org/stable/c/d3d702084d125689edb2b9395c707e09b471352e"}, {"url": "https://git.kernel.org/stable/c/50274b01ac1689b1a3f6bc4b5b3dbf361a55dd3a"}], "title": "crypto: sun8i-ss - Fix memory leak of pad", "x_generator": {"engine": "bippy-a5840b7849dd"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2021-47053", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-02-28T20:51:36.580190Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:13:29.294Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T05:24:39.873Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/2c67a9333da9d0a3b87310e0d116b7c9070c7b00", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/c633e025bd04f54d7b33331cfcdb71354b08ce59", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/d3d702084d125689edb2b9395c707e09b471352e", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/50274b01ac1689b1a3f6bc4b5b3dbf361a55dd3a", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/2c67a9333da9d0a3b87310e0d116b7c9070c7b00", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/c633e025bd04f54d7b33331cfcdb71354b08ce59", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/d3d702084d125689edb2b9395c707e09b471352e", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/50274b01ac1689b1a3f6bc4b5b3dbf361a55dd3a", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T05:24:39.873Z"}}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2021-47053", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-02-28T20:51:36.580190Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-23T19:01:13.853Z"}, "title": "CISA ADP Vulnrichment"}], "cna": {"title": "crypto: sun8i-ss - Fix memory leak of pad", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "d9b45418a917", "lessThan": "2c67a9333da9", "versionType": "git"}, {"status": "affected", "version": "d9b45418a917", "lessThan": "c633e025bd04", "versionType": "git"}, {"status": "affected", "version": "d9b45418a917", "lessThan": "d3d702084d12", "versionType": "git"}, {"status": "affected", "version": "d9b45418a917", "lessThan": "50274b01ac16", "versionType": "git"}], "programFiles": ["drivers/crypto/allwinner/sun8i-ss/sun8i-ss-hash.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "5.10"}, {"status": "unaffected", "version": "0", "lessThan": "5.10", "versionType": "custom"}, {"status": "unaffected", "version": "5.10.37", "versionType": "custom", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.11.21", "versionType": "custom", "lessThanOrEqual": "5.11.*"}, {"status": "unaffected", "version": "5.12.4", "versionType": "custom", "lessThanOrEqual": "5.12.*"}, {"status": "unaffected", "version": "5.13", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/crypto/allwinner/sun8i-ss/sun8i-ss-hash.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/2c67a9333da9d0a3b87310e0d116b7c9070c7b00"}, {"url": "https://git.kernel.org/stable/c/c633e025bd04f54d7b33331cfcdb71354b08ce59"}, {"url": "https://git.kernel.org/stable/c/d3d702084d125689edb2b9395c707e09b471352e"}, {"url": "https://git.kernel.org/stable/c/50274b01ac1689b1a3f6bc4b5b3dbf361a55dd3a"}], "x_generator": {"engine": "bippy-a5840b7849dd"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: sun8i-ss - Fix memory leak of pad\n\nIt appears there are several failure return paths that don't seem\nto be free'ing pad. Fix these.\n\nAddresses-Coverity: (\"Resource leak\")"}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-05-29T05:01:17.512Z"}}}, "cveMetadata": {"cveId": "CVE-2021-47053", "state": "PUBLISHED", "dateUpdated": "2024-08-04T05:24:39.873Z", "dateReserved": "2024-02-27T18:42:55.973Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-02-28T08:13:54.711Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}