CVE-2021-47071 - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: uio_hv_generic: Fix a memory leak in error handling paths If 'vmbus_establish_gpadl()' fails, the (recv|send)_gpadl will not be updated and 'hv_uio_cleanup()' in the error handling path will not be able to free the corresponding buffer. In such a case, we need to free the buffer explicitly.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/3ee098f96b8b6c1a98f7f97915f8873164e6af9d
https://git.kernel.org/stable/c/53486c467e356e06aa37047c984fccd64d78c827
https://git.kernel.org/stable/c/cdd91637d4ef33e2be19a8e16e72e7d00c996d76
https://git.kernel.org/stable/c/d84b5e912212b05f6b5bde9f682046accfbe0354
https://lore.kernel.org/linux-cve-announce/2024030141-CVE-2021-47071-cd46@gregkh/T/#u
https://nvd.nist.gov/vuln/detail/CVE-2021-47071
https://www.cve.org/CVERecord?id=CVE-2021-47071

History

No history.

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-03-01T21:15:10.052Z

Updated: 2024-08-04T05:24:39.582Z

Reserved: 2024-02-29T22:33:44.297Z

Link: CVE-2021-47071

Vulnrichment

Updated: 2024-08-04T05:24:39.582Z

NVD

Status : Awaiting Analysis

Published: 2024-03-01T22:15:46.967

Modified: 2024-03-01T22:22:25.913

Link: CVE-2021-47071

Redhat

Severity : Low

Publid Date: 2024-03-01T00:00:00Z

Links: CVE-2021-47071 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2021-47071", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-02-29T22:33:44.297Z", "datePublished": "2024-03-01T21:15:10.052Z", "dateUpdated": "2024-08-04T05:24:39.582Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-05-29T05:01:37.438Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nuio_hv_generic: Fix a memory leak in error handling paths\n\nIf 'vmbus_establish_gpadl()' fails, the (recv|send)_gpadl will not be\nupdated and 'hv_uio_cleanup()' in the error handling path will not be\nable to free the corresponding buffer.\n\nIn such a case, we need to free the buffer explicitly."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/uio/uio_hv_generic.c"], "versions": [{"version": "cdfa835c6e5e", "lessThan": "cdd91637d4ef", "status": "affected", "versionType": "git"}, {"version": "cdfa835c6e5e", "lessThan": "d84b5e912212", "status": "affected", "versionType": "git"}, {"version": "cdfa835c6e5e", "lessThan": "53486c467e35", "status": "affected", "versionType": "git"}, {"version": "cdfa835c6e5e", "lessThan": "3ee098f96b8b", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/uio/uio_hv_generic.c"], "versions": [{"version": "4.20", "status": "affected"}, {"version": "0", "lessThan": "4.20", "status": "unaffected", "versionType": "custom"}, {"version": "5.4.122", "lessThanOrEqual": "5.4.*", "status": "unaffected", "versionType": "custom"}, {"version": "5.10.40", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "custom"}, {"version": "5.12.7", "lessThanOrEqual": "5.12.*", "status": "unaffected", "versionType": "custom"}, {"version": "5.13", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/cdd91637d4ef33e2be19a8e16e72e7d00c996d76"}, {"url": "https://git.kernel.org/stable/c/d84b5e912212b05f6b5bde9f682046accfbe0354"}, {"url": "https://git.kernel.org/stable/c/53486c467e356e06aa37047c984fccd64d78c827"}, {"url": "https://git.kernel.org/stable/c/3ee098f96b8b6c1a98f7f97915f8873164e6af9d"}], "title": "uio_hv_generic: Fix a memory leak in error handling paths", "x_generator": {"engine": "bippy-a5840b7849dd"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2021-47071", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-03-04T14:40:01.877350Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:15:01.454Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T05:24:39.582Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/cdd91637d4ef33e2be19a8e16e72e7d00c996d76", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/d84b5e912212b05f6b5bde9f682046accfbe0354", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/53486c467e356e06aa37047c984fccd64d78c827", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/3ee098f96b8b6c1a98f7f97915f8873164e6af9d", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/cdd91637d4ef33e2be19a8e16e72e7d00c996d76", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/d84b5e912212b05f6b5bde9f682046accfbe0354", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/53486c467e356e06aa37047c984fccd64d78c827", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/3ee098f96b8b6c1a98f7f97915f8873164e6af9d", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T05:24:39.582Z"}}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2021-47071", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-03-04T14:40:01.877350Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-23T19:01:14.651Z"}, "title": "CISA ADP Vulnrichment"}], "cna": {"title": "uio_hv_generic: Fix a memory leak in error handling paths", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "cdfa835c6e5e", "lessThan": "cdd91637d4ef", "versionType": "git"}, {"status": "affected", "version": "cdfa835c6e5e", "lessThan": "d84b5e912212", "versionType": "git"}, {"status": "affected", "version": "cdfa835c6e5e", "lessThan": "53486c467e35", "versionType": "git"}, {"status": "affected", "version": "cdfa835c6e5e", "lessThan": "3ee098f96b8b", "versionType": "git"}], "programFiles": ["drivers/uio/uio_hv_generic.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "4.20"}, {"status": "unaffected", "version": "0", "lessThan": "4.20", "versionType": "custom"}, {"status": "unaffected", "version": "5.4.122", "versionType": "custom", "lessThanOrEqual": "5.4.*"}, {"status": "unaffected", "version": "5.10.40", "versionType": "custom", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.12.7", "versionType": "custom", "lessThanOrEqual": "5.12.*"}, {"status": "unaffected", "version": "5.13", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/uio/uio_hv_generic.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/cdd91637d4ef33e2be19a8e16e72e7d00c996d76"}, {"url": "https://git.kernel.org/stable/c/d84b5e912212b05f6b5bde9f682046accfbe0354"}, {"url": "https://git.kernel.org/stable/c/53486c467e356e06aa37047c984fccd64d78c827"}, {"url": "https://git.kernel.org/stable/c/3ee098f96b8b6c1a98f7f97915f8873164e6af9d"}], "x_generator": {"engine": "bippy-a5840b7849dd"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nuio_hv_generic: Fix a memory leak in error handling paths\n\nIf 'vmbus_establish_gpadl()' fails, the (recv|send)_gpadl will not be\nupdated and 'hv_uio_cleanup()' in the error handling path will not be\nable to free the corresponding buffer.\n\nIn such a case, we need to free the buffer explicitly."}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-05-29T05:01:37.438Z"}}}, "cveMetadata": {"cveId": "CVE-2021-47071", "state": "PUBLISHED", "dateUpdated": "2024-08-04T05:24:39.582Z", "dateReserved": "2024-02-29T22:33:44.297Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-03-01T21:15:10.052Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}