CVE-2021-47057 - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ss - Fix memory leak of object d when dma_iv fails to map In the case where the dma_iv mapping fails, the return error path leaks the memory allocated to object d. Fix this by adding a new error return label and jumping to this to ensure d is free'd before the return. Addresses-Coverity: ("Resource leak")

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/617ec35ed51f731a593ae7274228ef2cfc9cb781
https://git.kernel.org/stable/c/6516cb852d704ff8d615de1f93cd443a99736c3d
https://git.kernel.org/stable/c/98b5ef3e97b16eaeeedb936f8bda3594ff84a70e
https://git.kernel.org/stable/c/e1f2d739849c3239df1ea3f97d40bade4b808410
https://lore.kernel.org/linux-cve-announce/2024022951-CVE-2021-47057-01fa@gregkh/T/#u
https://nvd.nist.gov/vuln/detail/CVE-2021-47057
https://www.cve.org/CVERecord?id=CVE-2021-47057

History

Wed, 06 Nov 2024 15:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-770
Metrics	cvssV3_1 `{'score': 2.3, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L'}`	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}`

Mon, 04 Nov 2024 13:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-02-29T22:37:32.216Z

Updated: 2024-11-06T14:41:35.263Z

Reserved: 2024-02-29T22:33:44.294Z

Link: CVE-2021-47057

Vulnrichment

Updated: 2024-08-04T05:24:39.143Z

NVD

Status : Awaiting Analysis

Published: 2024-02-29T23:15:07.590

Modified: 2024-11-06T15:35:01.363

Link: CVE-2021-47057

Redhat

Severity : Low

Publid Date: 2024-02-29T00:00:00Z

Links: CVE-2021-47057 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2021-47057", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-02-29T22:33:44.294Z", "datePublished": "2024-02-29T22:37:32.216Z", "dateUpdated": "2024-11-06T14:41:35.263Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-11-04T11:58:36.025Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: sun8i-ss - Fix memory leak of object d when dma_iv fails to map\n\nIn the case where the dma_iv mapping fails, the return error path leaks\nthe memory allocated to object d. Fix this by adding a new error return\nlabel and jumping to this to ensure d is free'd before the return.\n\nAddresses-Coverity: (\"Resource leak\")"}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/crypto/allwinner/sun8i-ss/sun8i-ss-prng.c"], "versions": [{"version": "ac2614d721de", "lessThan": "617ec35ed51f", "status": "affected", "versionType": "git"}, {"version": "ac2614d721de", "lessThan": "e1f2d739849c", "status": "affected", "versionType": "git"}, {"version": "ac2614d721de", "lessThan": "6516cb852d70", "status": "affected", "versionType": "git"}, {"version": "ac2614d721de", "lessThan": "98b5ef3e97b1", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/crypto/allwinner/sun8i-ss/sun8i-ss-prng.c"], "versions": [{"version": "5.10", "status": "affected"}, {"version": "0", "lessThan": "5.10", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.37", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.11.21", "lessThanOrEqual": "5.11.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.12.4", "lessThanOrEqual": "5.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.13", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/617ec35ed51f731a593ae7274228ef2cfc9cb781"}, {"url": "https://git.kernel.org/stable/c/e1f2d739849c3239df1ea3f97d40bade4b808410"}, {"url": "https://git.kernel.org/stable/c/6516cb852d704ff8d615de1f93cd443a99736c3d"}, {"url": "https://git.kernel.org/stable/c/98b5ef3e97b16eaeeedb936f8bda3594ff84a70e"}], "title": "crypto: sun8i-ss - Fix memory leak of object d when dma_iv fails to map", "x_generator": {"engine": "bippy-9e1c9544281a"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-770", "lang": "en", "description": "CWE-770 Allocation of Resources Without Limits or Throttling"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2024-03-05T20:56:30.683698Z", "id": "CVE-2021-47057", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-06T14:41:35.263Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T05:24:39.143Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/617ec35ed51f731a593ae7274228ef2cfc9cb781", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/e1f2d739849c3239df1ea3f97d40bade4b808410", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/6516cb852d704ff8d615de1f93cd443a99736c3d", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/98b5ef3e97b16eaeeedb936f8bda3594ff84a70e", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/617ec35ed51f731a593ae7274228ef2cfc9cb781", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/e1f2d739849c3239df1ea3f97d40bade4b808410", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/6516cb852d704ff8d615de1f93cd443a99736c3d", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/98b5ef3e97b16eaeeedb936f8bda3594ff84a70e", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T05:24:39.143Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2021-47057", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-03-05T20:56:30.683698Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-770", "description": "CWE-770 Allocation of Resources Without Limits or Throttling"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-23T19:01:16.038Z"}}], "cna": {"title": "crypto: sun8i-ss - Fix memory leak of object d when dma_iv fails to map", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "ac2614d721de", "lessThan": "617ec35ed51f", "versionType": "git"}, {"status": "affected", "version": "ac2614d721de", "lessThan": "e1f2d739849c", "versionType": "git"}, {"status": "affected", "version": "ac2614d721de", "lessThan": "6516cb852d70", "versionType": "git"}, {"status": "affected", "version": "ac2614d721de", "lessThan": "98b5ef3e97b1", "versionType": "git"}], "programFiles": ["drivers/crypto/allwinner/sun8i-ss/sun8i-ss-prng.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "5.10"}, {"status": "unaffected", "version": "0", "lessThan": "5.10", "versionType": "semver"}, {"status": "unaffected", "version": "5.10.37", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.11.21", "versionType": "semver", "lessThanOrEqual": "5.11.*"}, {"status": "unaffected", "version": "5.12.4", "versionType": "semver", "lessThanOrEqual": "5.12.*"}, {"status": "unaffected", "version": "5.13", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/crypto/allwinner/sun8i-ss/sun8i-ss-prng.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/617ec35ed51f731a593ae7274228ef2cfc9cb781"}, {"url": "https://git.kernel.org/stable/c/e1f2d739849c3239df1ea3f97d40bade4b808410"}, {"url": "https://git.kernel.org/stable/c/6516cb852d704ff8d615de1f93cd443a99736c3d"}, {"url": "https://git.kernel.org/stable/c/98b5ef3e97b16eaeeedb936f8bda3594ff84a70e"}], "x_generator": {"engine": "bippy-9e1c9544281a"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: sun8i-ss - Fix memory leak of object d when dma_iv fails to map\n\nIn the case where the dma_iv mapping fails, the return error path leaks\nthe memory allocated to object d. Fix this by adding a new error return\nlabel and jumping to this to ensure d is free'd before the return.\n\nAddresses-Coverity: (\"Resource leak\")"}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-11-04T11:58:36.025Z"}}}, "cveMetadata": {"cveId": "CVE-2021-47057", "state": "PUBLISHED", "dateUpdated": "2024-11-06T14:41:35.263Z", "dateReserved": "2024-02-29T22:33:44.294Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-02-29T22:37:32.216Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: sun8i-ss - Fix memory leak of object d when dma_iv fails to map\n\nIn the case where the dma_iv mapping fails, the return error path leaks\nthe memory allocated to object d. Fix this by adding a new error return\nlabel and jumping to this to ensure d is free'd before the return.\n\nAddresses-Coverity: (\"Resource leak\")"}, {"lang": "es", "value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: crypto: sun8i-ss: corrige la p\u00e9rdida de memoria del objeto d cuando dma_iv no se puede asignar. En el caso de que falle la asignaci\u00f3n de dma_iv, la ruta de error de retorno pierde la memoria asignada al objeto d. Solucione este problema agregando una nueva etiqueta de devoluci\u00f3n de error y saltando a ella para asegurarse de que d est\u00e9 libre antes de la devoluci\u00f3n. Direcciones-Cobertura: (\"Fuga de recursos\")"}], "id": "CVE-2021-47057", "lastModified": "2024-11-06T15:35:01.363", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2024-02-29T23:15:07.590", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/617ec35ed51f731a593ae7274228ef2cfc9cb781"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/6516cb852d704ff8d615de1f93cd443a99736c3d"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/98b5ef3e97b16eaeeedb936f8bda3594ff84a70e"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/e1f2d739849c3239df1ea3f97d40bade4b808410"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-770"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{"bugzilla": {"description": "kernel: crypto: sun8i-ss - Fix memory leak of object d when dma_iv fails to map", "id": "2267181", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2267181"}, "csaw": false, "cvss3": {"cvss3_base_score": "2.3", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L", "status": "draft"}, "cwe": "CWE-402", "details": ["In the Linux kernel, the following vulnerability has been resolved:\ncrypto: sun8i-ss - Fix memory leak of object d when dma_iv fails to map\nIn the case where the dma_iv mapping fails, the return error path leaks\nthe memory allocated to object d. Fix this by adding a new error return\nlabel and jumping to this to ensure d is free'd before the return.\nAddresses-Coverity: (\"Resource leak\")"], "name": "CVE-2021-47057", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Out of support scope", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Out of support scope", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Out of support scope", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2024-02-29T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2021-47057\nhttps://nvd.nist.gov/vuln/detail/CVE-2021-47057\nhttps://lore.kernel.org/linux-cve-announce/2024022951-CVE-2021-47057-01fa@gregkh/T/#u"], "statement": "Red Hat Enterprise Linux 8 and 9 are not affected by this vulnerability.", "threat_severity": "Low", "upstream_fix": "kernel 5.10.37, kernel 5.11.21, kernel 5.12.4, kernel 5.13"}