CVE-2021-47150 - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: net: fec: fix the potential memory leak in fec_enet_init() If the memory allocated for cbd_base is failed, it should free the memory allocated for the queues, otherwise it causes memory leak. And if the memory allocated for the queues is failed, it can return error directly.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/15102886bc8f5f29daaadf2d925591d564c17e9f
https://git.kernel.org/stable/c/20255d41ac560397b6a07d8d87dcc5e2efc7672a
https://git.kernel.org/stable/c/32a1777fd113335c3f70dc445dffee0ad1c6870f
https://git.kernel.org/stable/c/619fee9eb13b5d29e4267cb394645608088c28a8
https://git.kernel.org/stable/c/8ee7ef4a57a9e1228b6f345aaa70aa8951c7e9cd
https://lore.kernel.org/linux-cve-announce/2024032500-CVE-2021-47150-f066@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2021-47150
https://www.cve.org/CVERecord?id=CVE-2021-47150

History

No history.

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-03-25T09:07:45.875Z

Updated: 2024-11-04T12:00:27.542Z

Reserved: 2024-03-04T18:12:48.845Z

Link: CVE-2021-47150

Vulnrichment

Updated: 2024-05-23T19:01:19.874Z

NVD

Status : Awaiting Analysis

Published: 2024-03-25T09:15:09.257

Modified: 2024-03-25T13:47:14.087

Link: CVE-2021-47150

Redhat

Severity : Low

Publid Date: 2024-03-25T00:00:00Z

Links: CVE-2021-47150 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2021-47150", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-03-04T18:12:48.845Z", "datePublished": "2024-03-25T09:07:45.875Z", "dateUpdated": "2024-11-04T12:00:27.542Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-11-04T12:00:27.542Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: fec: fix the potential memory leak in fec_enet_init()\n\nIf the memory allocated for cbd_base is failed, it should\nfree the memory allocated for the queues, otherwise it causes\nmemory leak.\n\nAnd if the memory allocated for the queues is failed, it can\nreturn error directly."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/ethernet/freescale/fec_main.c"], "versions": [{"version": "59d0f7465644", "lessThan": "15102886bc8f", "status": "affected", "versionType": "git"}, {"version": "59d0f7465644", "lessThan": "20255d41ac56", "status": "affected", "versionType": "git"}, {"version": "59d0f7465644", "lessThan": "8ee7ef4a57a9", "status": "affected", "versionType": "git"}, {"version": "59d0f7465644", "lessThan": "32a1777fd113", "status": "affected", "versionType": "git"}, {"version": "59d0f7465644", "lessThan": "619fee9eb13b", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/ethernet/freescale/fec_main.c"], "versions": [{"version": "3.18", "status": "affected"}, {"version": "0", "lessThan": "3.18", "status": "unaffected", "versionType": "semver"}, {"version": "4.19.193", "lessThanOrEqual": "4.19.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.4.124", "lessThanOrEqual": "5.4.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.42", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.12.9", "lessThanOrEqual": "5.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.13", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/15102886bc8f5f29daaadf2d925591d564c17e9f"}, {"url": "https://git.kernel.org/stable/c/20255d41ac560397b6a07d8d87dcc5e2efc7672a"}, {"url": "https://git.kernel.org/stable/c/8ee7ef4a57a9e1228b6f345aaa70aa8951c7e9cd"}, {"url": "https://git.kernel.org/stable/c/32a1777fd113335c3f70dc445dffee0ad1c6870f"}, {"url": "https://git.kernel.org/stable/c/619fee9eb13b5d29e4267cb394645608088c28a8"}], "title": "net: fec: fix the potential memory leak in fec_enet_init()", "x_generator": {"engine": "bippy-9e1c9544281a"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2021-47150", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-03-28T18:23:57.615940Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:14:24.195Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T05:24:40.135Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/15102886bc8f5f29daaadf2d925591d564c17e9f", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/20255d41ac560397b6a07d8d87dcc5e2efc7672a", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/8ee7ef4a57a9e1228b6f345aaa70aa8951c7e9cd", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/32a1777fd113335c3f70dc445dffee0ad1c6870f", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/619fee9eb13b5d29e4267cb394645608088c28a8", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2021-47150", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-03-04T18:12:48.845Z", "datePublished": "2024-03-25T09:07:45.875Z", "dateUpdated": "2024-06-04T17:14:24.195Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-05-29T05:02:58.932Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: fec: fix the potential memory leak in fec_enet_init()\n\nIf the memory allocated for cbd_base is failed, it should\nfree the memory allocated for the queues, otherwise it causes\nmemory leak.\n\nAnd if the memory allocated for the queues is failed, it can\nreturn error directly."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/ethernet/freescale/fec_main.c"], "versions": [{"version": "59d0f7465644", "lessThan": "15102886bc8f", "status": "affected", "versionType": "git"}, {"version": "59d0f7465644", "lessThan": "20255d41ac56", "status": "affected", "versionType": "git"}, {"version": "59d0f7465644", "lessThan": "8ee7ef4a57a9", "status": "affected", "versionType": "git"}, {"version": "59d0f7465644", "lessThan": "32a1777fd113", "status": "affected", "versionType": "git"}, {"version": "59d0f7465644", "lessThan": "619fee9eb13b", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/ethernet/freescale/fec_main.c"], "versions": [{"version": "3.18", "status": "affected"}, {"version": "0", "lessThan": "3.18", "status": "unaffected", "versionType": "custom"}, {"version": "4.19.193", "lessThanOrEqual": "4.19.*", "status": "unaffected", "versionType": "custom"}, {"version": "5.4.124", "lessThanOrEqual": "5.4.*", "status": "unaffected", "versionType": "custom"}, {"version": "5.10.42", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "custom"}, {"version": "5.12.9", "lessThanOrEqual": "5.12.*", "status": "unaffected", "versionType": "custom"}, {"version": "5.13", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/15102886bc8f5f29daaadf2d925591d564c17e9f"}, {"url": "https://git.kernel.org/stable/c/20255d41ac560397b6a07d8d87dcc5e2efc7672a"}, {"url": "https://git.kernel.org/stable/c/8ee7ef4a57a9e1228b6f345aaa70aa8951c7e9cd"}, {"url": "https://git.kernel.org/stable/c/32a1777fd113335c3f70dc445dffee0ad1c6870f"}, {"url": "https://git.kernel.org/stable/c/619fee9eb13b5d29e4267cb394645608088c28a8"}], "title": "net: fec: fix the potential memory leak in fec_enet_init()", "x_generator": {"engine": "bippy-a5840b7849dd"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2021-47150", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-03-28T18:23:57.615940Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-23T19:01:19.874Z"}, "title": "CISA ADP Vulnrichment"}]}}