CVE-2021-47021: mt76: mt7915: fix memleak when mt7915_unregister_device()
Published Feb 28, 2024
·Updated
In the Linux kernel, the following vulnerability has been resolved:
mt76: mt7915: fix memleak when mt7915unregisterdevice()
mt7915txtokenput() should get call before mt76freependingtxwi().
Affected Software
2 affected components
Linux Linux kernel>=5.11.4<5.11.21
Linux Linux kernel>=5.12<5.12.4
Remediation
Event History
Feb 28, 2024
CVE Published
via MITRE·08:13 AM
Data Sourced
via MITRE·08:13 AM
Description
Data Sourced
via NVD·09:15 AM
Description
Frequently Asked Questions
1
Who is exposed to this issue?
Systems running the Linux kernel with the affected mt76 mt7915 driver code are exposed. Exploitation requires local access and low privileges.
2
What is the impact of successful exploitation?
The CVSS vector indicates high availability impact, with no confidentiality or integrity impact. The issue is a memory leak during mt7915 device unregistration.
3
What should be done to remediate it?
Apply an available patch that ensures mt7915_tx_token_put() is called before mt76_free_pending_txwi() during device unregistration.