In the Linux kernel, the following vulnerability has been resolved:

media: zr364xx: fix memory leak in zr364xx_start_readpipe

syzbot reported memory leak in zr364xx driver.
The problem was in non-freed urb in case of
usb_submit_urb() fail.

backtrace:
[<ffffffff82baedf6>] kmalloc include/linux/slab.h:561 [inline]
[<ffffffff82baedf6>] usb_alloc_urb+0x66/0xe0 drivers/usb/core/urb.c:74
[<ffffffff82f7cce8>] zr364xx_start_readpipe+0x78/0x130 drivers/media/usb/zr364xx/zr364xx.c:1022
[<ffffffff84251dfc>] zr364xx_board_init drivers/media/usb/zr364xx/zr364xx.c:1383 [inline]
[<ffffffff84251dfc>] zr364xx_probe+0x6a3/0x851 drivers/media/usb/zr364xx/zr364xx.c:1516
[<ffffffff82bb6507>] usb_probe_interface+0x177/0x370 drivers/usb/core/driver.c:396
[<ffffffff826018a9>] really_probe+0x159/0x500 drivers/base/dd.c:576

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00009.

Exploitation none

Automatable no

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
ccbf035ae5de4c535160fc99f73feb44cc55b534 affected < c57b2bd3247925e253729dce283d6bf6abc9339d
ccbf035ae5de4c535160fc99f73feb44cc55b534 affected < bbc80a972a3c5d7eba3f6c9c07af8fea42f5c513
ccbf035ae5de4c535160fc99f73feb44cc55b534 affected < b0633051a6cb24186ff04ce1af99c7de18c1987e
ccbf035ae5de4c535160fc99f73feb44cc55b534 affected < 021c294dff030f3ba38eb81e400ba123db32ecbc
ccbf035ae5de4c535160fc99f73feb44cc55b534 affected < 0edd6759167295ea9969e89283b81017b4c688aa
ccbf035ae5de4c535160fc99f73feb44cc55b534 affected < c57bfd8000d7677bf435873b440eec0c47f73a08
ccbf035ae5de4c535160fc99f73feb44cc55b534 affected < 5f3f81f1c96b501d180021c23c25e9f48eaab235
ccbf035ae5de4c535160fc99f73feb44cc55b534 affected < d69b39d89f362cfeeb54a68690768d0d257b2c8f
ccbf035ae5de4c535160fc99f73feb44cc55b534 affected < 0a045eac8d0427b64577a24d74bb8347c905ac65
Linux Linux affected
Version Status Constraints
2.6.32 affected —
0 unaffected < 2.6.32
4.4.276 unaffected ≤ 4.4.*
4.9.276 unaffected ≤ 4.9.*
4.14.240 unaffected ≤ 4.14.*
4.19.198 unaffected ≤ 4.19.*
5.4.133 unaffected ≤ 5.4.*
5.10.51 unaffected ≤ 5.10.*
5.12.18 unaffected ≤ 5.12.*
5.13.3 unaffected ≤ 5.13.*
5.14 unaffected ≤ *

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/021c294dff030f3ba38eb81e400ba123db32ecbc cve-icon cve-icon
https://git.kernel.org/stable/c/0a045eac8d0427b64577a24d74bb8347c905ac65 cve-icon cve-icon
https://git.kernel.org/stable/c/0edd6759167295ea9969e89283b81017b4c688aa cve-icon cve-icon
https://git.kernel.org/stable/c/5f3f81f1c96b501d180021c23c25e9f48eaab235 cve-icon cve-icon
https://git.kernel.org/stable/c/b0633051a6cb24186ff04ce1af99c7de18c1987e cve-icon cve-icon
https://git.kernel.org/stable/c/bbc80a972a3c5d7eba3f6c9c07af8fea42f5c513 cve-icon cve-icon
https://git.kernel.org/stable/c/c57b2bd3247925e253729dce283d6bf6abc9339d cve-icon cve-icon
https://git.kernel.org/stable/c/c57bfd8000d7677bf435873b440eec0c47f73a08 cve-icon cve-icon
https://git.kernel.org/stable/c/d69b39d89f362cfeeb54a68690768d0d257b2c8f cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024052138-CVE-2021-47344-ea37@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2021-47344 cve-icon
https://www.cve.org/CVERecord?id=CVE-2021-47344 cve-icon
History

Tue, 24 Dec 2024 16:30:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
Metrics cvssV3_1

{'score': 4.1, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H'}

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-05-04T07:09:02.615Z

Reserved: 2024-05-21T14:28:16.980Z

Link: CVE-2021-47344

cve-icon Vulnrichment

Updated: 2024-08-04T05:32:08.579Z

cve-icon NVD

Status : Analyzed

Published: 2024-05-21T15:15:21.067

Modified: 2024-12-24T16:13:44.487

Link: CVE-2021-47344

cve-icon Redhat

Severity : Low

Publid Date: 2024-05-21T00:00:00Z

Links: CVE-2021-47344 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses