CVE-2021-47543 : In the Linux kernel, the following vulnerability has been resolved: perf report

In the Linux kernel, the following vulnerability has been resolved: perf report: Fix memory leaks around perf_tip() perf_tip() may allocate memory or use a literal, this means memory wasn't freed if allocated. Change the API so that literals aren't used. At the same time add missing frees for system_path. These issues were spotted using leak sanitizer.

Published 2024-05-24 15:15:19

Updated 2024-06-10 18:31:52

Source Linux

View at NVD, CVE.org

Products affected by CVE-2021-47543

Linux » Linux Kernel
Versions from including (>=) 5.11 and before (<) 5.15.7
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions from including (>=) 5.5 and before (<) 5.10.84
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions before (<) 5.4.164
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2021-47543

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 5 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2021-47543

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	1.8	3.6	NIST	2024-06-10
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2021-47543

CWE-401 Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2021-47543

https://git.kernel.org/stable/c/71e284dcebecb9fd204ff11097469cc547723ad1

perf report: Fix memory leaks around perf_tip() - kernel/git/stable/linux.git - Linux kernel stable tree
Patch
https://git.kernel.org/stable/c/ff061b5bda73c4f785b4703eeb0848fd99e5608a

perf report: Fix memory leaks around perf_tip() - kernel/git/stable/linux.git - Linux kernel stable tree
Patch
https://git.kernel.org/stable/c/df5990db088d4c7fea9a2f9b8195a7859e1768c4

perf report: Fix memory leaks around perf_tip() - kernel/git/stable/linux.git - Linux kernel stable tree
Patch
https://git.kernel.org/stable/c/d9fc706108c15f8bc2d4ccccf8e50f74830fabd9

perf report: Fix memory leaks around perf_tip() - kernel/git/stable/linux.git - Linux kernel stable tree
Patch

Jump to

Vulnerability Details : CVE-2021-47543

Products affected by CVE-2021-47543

Exploit prediction scoring system (EPSS) score for CVE-2021-47543

CVSS scores for CVE-2021-47543

CWE ids for CVE-2021-47543

References for CVE-2021-47543