CVE-2021-47425: i2c: acpi: fix resource leak in reconfiguration device addition
In the Linux kernel, the following vulnerability has been resolved:
i2c: acpi: fix resource leak in reconfiguration device addition
acpii2cfindadapterbyhandle() calls busfinddevice() which takes a reference on the adapter which is never released which will result in a reference count leak and render the adapter unremovable. Make sure to put the adapter after creating the client in the same manner that we do for OF.
[wsa: fixed title]
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2021-47425?
CVE-2021-47425 is categorized with a medium severity rating due to the resource leak in the Linux kernel.
How do I fix CVE-2021-47425?
To fix CVE-2021-47425, upgrade to the latest version of the Linux kernel where the vulnerability has been addressed.
What software versions are affected by CVE-2021-47425?
CVE-2021-47425 affects various versions of the Linux kernel that include the i2c ACPI subsystem.
What type of vulnerability is CVE-2021-47425?
CVE-2021-47425 is a resource leak vulnerability that occurs within the Linux kernel's i2c subsystem.
Can CVE-2021-47425 be exploited remotely?
CVE-2021-47425 does not appear to be remotely exploitable as it requires local access to the system.