CVE-2021-47009: KEYS: trusted: Fix memory leak on object td
In the Linux kernel, the following vulnerability has been resolved:
KEYS: trusted: Fix memory leak on object td
Two error return paths are neglecting to free allocated object td, causing a memory leak. Fix this by returning via the error return path that securely kfree's td.
Fixes clang scan-build warning: security/keys/trusted-keys/trustedtpm1.c:496:10: warning: Potential memory leak [unix.Malloc]
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2021-47009?
CVE-2021-47009 is rated as a low severity vulnerability due to its nature of causing a memory leak.
How do I fix CVE-2021-47009?
Fix CVE-2021-47009 by updating to a patched version of the Linux kernel that addresses the memory leak issue.
What versions of the Linux kernel are affected by CVE-2021-47009?
CVE-2021-47009 affects Linux kernel versions between 5.10.20 and 5.10.38, 5.11.3 and 5.11.22, as well as 5.12 and up to 5.12.5.
Is CVE-2021-47009 being actively exploited?
As of now, there are no known active exploits targeting CVE-2021-47009, but it is advisable to apply patches.
What is the impact of CVE-2021-47009 on system performance?
CVE-2021-47009 can lead to resource exhaustion over time due to memory leakage, potentially affecting system performance.