CVE-2021-46985: ACPI: scan: Fix a memory leak in an error handling path
Published Feb 28, 2024
·Updated
In the Linux kernel, the following vulnerability has been resolved:
ACPI: scan: Fix a memory leak in an error handling path
If 'acpidevicesetname()' fails, we must free 'acpidevicebusid->busid' or there is a (potential) memory leak.
Affected Software
8 affected components
Linux Linux kernel>=4.9.264<4.9.269
Linux Linux kernel>=4.14.228<4.14.233
Linux Linux kernel>=4.19.184<4.19.191
Linux Linux kernel>=5.4.109<5.4.120
Linux Linux kernel>=5.10.27<5.10.38
Linux Linux kernel>=5.11.11<5.11.22
Linux Linux kernel>=5.12<5.12.5
Linux Linux kernel=5.13-rc1
Remediation
Event History
Feb 28, 2024
CVE Published
via MITRE·08:13 AM
Data Sourced
via MITRE·08:13 AM
Description
Data Sourced
via NVD·09:15 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2021-46985?
CVE-2021-46985 is considered a medium-severity vulnerability due to its potential for causing memory leaks in the Linux kernel.
2
How do I fix CVE-2021-46985?
To resolve CVE-2021-46985, ensure that your Linux kernel is updated to a version that includes the fix for the memory leak issue.
3
Which Linux kernel versions are affected by CVE-2021-46985?
CVE-2021-46985 affects various Linux kernel versions from 4.9.264 to 5.13-rc1.
4
What component of the Linux kernel is affected by CVE-2021-46985?
CVE-2021-46985 impacts the ACPI scan component of the Linux kernel.
5
Is CVE-2021-46985 a remote or local vulnerability?
CVE-2021-46985 is primarily a local vulnerability, affecting systems where the attacker has local access.