CVE-2021-47150: net: fec: fix the potential memory leak in fec_enet_init()
In the Linux kernel, the following vulnerability has been resolved:
net: fec: fix the potential memory leak in fecenetinit()
If the memory allocated for cbdbase is failed, it should free the memory allocated for the queues, otherwise it causes memory leak.
And if the memory allocated for the queues is failed, it can return error directly.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1
Event History
Frequently Asked Questions
What is the severity of CVE-2021-47150?
CVE-2021-47150 is categorized as a medium severity vulnerability due to the potential for a memory leak.
How do I fix CVE-2021-47150?
To fix CVE-2021-47150, ensure that you upgrade your Linux kernel to a version that includes the patch addressing this memory leak.
What software versions are affected by CVE-2021-47150?
CVE-2021-47150 affects various versions of the Linux kernel from 3.18 to 5.13-rc3.
What types of systems are vulnerable to CVE-2021-47150?
CVE-2021-47150 impacts systems running vulnerable versions of the Linux kernel, particularly those utilizing the FEC driver.
Is there a workaround for CVE-2021-47150?
There are no known workarounds for CVE-2021-47150, so the recommended action is to update the Linux kernel.