CVE-2021-47177

MEDIUM

Linux Kernel < 4.14.235 - Memory Leak

Title source: rule

Description

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix sysfs leak in alloc_iommu() iommu_device_sysfs_add() is called before, so is has to be cleaned on subsequent errors.

References (6)

[Patch] https://git.kernel.org/stable/c/044bbe8b92ab4e542de7f6c93c88ea65cccd8e29

[Patch] https://git.kernel.org/stable/c/0ee74d5a48635c848c20f152d0d488bf84641304

[Patch] https://git.kernel.org/stable/c/22da9f4978381a99f1abaeaf6c9b83be6ab5ddd8

[Patch] https://git.kernel.org/stable/c/2ec5e9bb6b0560c90d315559c28a99723c80b996

[Patch] https://git.kernel.org/stable/c/ca466561eef36d1ec657673e3944eb6340bddb5b

[Patch] https://git.kernel.org/stable/c/f01134321d04f47c718bb41b799bcdeda27873d2

Scores

CVSS v3 5.5

EPSS 0.0001

EPSS Percentile 2.5%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Classification

CWE

CWE-401

Status published

Affected Products (4)

linux/linux_kernel < 4.14.235

linux/linux_kernel

Timeline

Published Mar 25, 2024

Tracked Since Feb 18, 2026