CVE-2021-47519: can: m_can: m_can_read_fifo: fix memory leak in error branch
First published: Fri May 24 2024(Updated: )
In the Linux kernel, the following vulnerability has been resolved: can: m_can: m_can_read_fifo: fix memory leak in error branch In m_can_read_fifo(), if the second call to m_can_fifo_read() fails, the function jump to the out_fail label and returns without calling m_can_receive_skb(). This means that the skb previously allocated by alloc_can_skb() is not freed. In other terms, this is a memory leak. This patch adds a goto label to destroy the skb if an error occurs. Issue was found with GCC -fanalyzer, please follow the link below for details.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Kernel | >=5.15<5.15.8 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2021-47519?
CVE-2021-47519 is classified as a low severity vulnerability affecting the Linux kernel.
How do I fix CVE-2021-47519?
To fix CVE-2021-47519, update your Linux kernel to a version beyond 5.15.8 where the vulnerability has been patched.
What systems are affected by CVE-2021-47519?
CVE-2021-47519 affects systems running Linux kernel versions between 5.15 and 5.15.8.
What does CVE-2021-47519 impact in the Linux kernel?
CVE-2021-47519 impacts the m_can_read_fifo function, specifically a memory leak in the error handling branch.
Is CVE-2021-47519 a remote exploit vulnerability?
CVE-2021-47519 does not provide an avenue for remote exploitation as it requires local access to the affected kernel.
- agent/title
- agent/references
- agent/description
- agent/first-publish-date
- agent/type
- agent/author
- agent/weakness
- agent/remedy
- agent/severity
- agent/softwarecombine
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/linux
- canonical/linux kernel
- version/linux kernel/5.15