CVE-2021-47330 : In the Linux kernel, the following vulnerability has been resolved: tty: serial

In the Linux kernel, the following vulnerability has been resolved: tty: serial: 8250: serial_cs: Fix a memory leak in error handling path In the probe function, if the final 'serial_config()' fails, 'info' is leaking. Add a resource handling path to free this memory.

Published 2024-05-21 14:35:42

Updated 2024-12-24 16:17:26

Source Linux

View at NVD, CVE.org

Products affected by CVE-2021-47330

Linux » Linux Kernel
Versions before (<) 4.4.276
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions from including (>=) 5.11 and before (<) 5.12.19
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions from including (>=) 4.20 and before (<) 5.4.134
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions from including (>=) 5.5 and before (<) 5.10.52
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions from including (>=) 4.15 and before (<) 4.19.198
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions from including (>=) 4.5 and before (<) 4.9.276
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions from including (>=) 5.13 and before (<) 5.13.4
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions from including (>=) 4.10 and before (<) 4.14.240
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2021-47330

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 7 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2021-47330

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	1.8	3.6	NIST	2024-12-24
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2021-47330

CWE-401 Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2021-47330

https://git.kernel.org/stable/c/fad92b11047a748c996ebd6cfb164a63814eeb2e

tty: serial: 8250: serial_cs: Fix a memory leak in error handling path - kernel/git/stable/linux.git - Linux kernel stable tree
Patch
https://git.kernel.org/stable/c/b2ef1f5de40342de44fc5355321595f91774dab5

tty: serial: 8250: serial_cs: Fix a memory leak in error handling path - kernel/git/stable/linux.git - Linux kernel stable tree
Patch
https://git.kernel.org/stable/c/c39cf4df19acf0133fa284a8cd83fad42cd13cc2

tty: serial: 8250: serial_cs: Fix a memory leak in error handling path - kernel/git/stable/linux.git - Linux kernel stable tree
Patch
https://git.kernel.org/stable/c/34f4590f5ec9859ea9136249f528173d150bd584

tty: serial: 8250: serial_cs: Fix a memory leak in error handling path - kernel/git/stable/linux.git - Linux kernel stable tree
Patch
https://git.kernel.org/stable/c/331f5923fce4f45b8170ccf06c529e8eb28f37bc

tty: serial: 8250: serial_cs: Fix a memory leak in error handling path - kernel/git/stable/linux.git - Linux kernel stable tree
Patch
https://git.kernel.org/stable/c/cddee5c287e26f6b2ba5c0ffdfc3a846f2f10461

tty: serial: 8250: serial_cs: Fix a memory leak in error handling path - kernel/git/stable/linux.git - Linux kernel stable tree
Patch
https://git.kernel.org/stable/c/7a80f71601af015856a0aeb1e3c294037ac3dd32

tty: serial: 8250: serial_cs: Fix a memory leak in error handling path - kernel/git/stable/linux.git - Linux kernel stable tree
Patch
https://git.kernel.org/stable/c/b5a2799cd62ed30c81b22c23028d9ee374e2138c

tty: serial: 8250: serial_cs: Fix a memory leak in error handling path - kernel/git/stable/linux.git - Linux kernel stable tree
Patch
https://git.kernel.org/stable/c/ee16bed959862a6de2913f71a04cb563d7237b67

tty: serial: 8250: serial_cs: Fix a memory leak in error handling path - kernel/git/stable/linux.git - Linux kernel stable tree
Patch

Jump to

Vulnerability Details : CVE-2021-47330

Products affected by CVE-2021-47330

Exploit prediction scoring system (EPSS) score for CVE-2021-47330

CVSS scores for CVE-2021-47330

CWE ids for CVE-2021-47330

References for CVE-2021-47330