CVE-2021-47305
See a problem?- Source
- https://nvd.nist.gov/vuln/detail/CVE-2021-47305
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-47305.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2021-47305
- Related
- Published
- 2024-05-21T15:15:18Z
- Modified
- 2024-09-11T04:41:07.332516Z
- Summary
- [none]
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
dma-buf/sync_file: Don't leak fences on merge failure
Each addfence() call does a dmafenceget() on the relevant fence. In the error path, we weren't calling dmafenceput() so all those fences got leaked. Also, in the kreallocarray failure case, we weren't freeing the fences array. Instead, ensure that i and fences are always zero-initialized and dmafenceput() all the fences and kfree(fences) on every error path.
- References
-
- https://git.kernel.org/stable/c/0d514185ae792d3a1903c8e1a83899aa996705ce
- https://git.kernel.org/stable/c/19edcd97727aae9362444a859a24d99a8730cb27
- https://git.kernel.org/stable/c/19f51c2529339280d2c8c6427cd3e21ddf1ac3f8
- https://git.kernel.org/stable/c/41f45e91c92c8480242ea448d54e28c753b13902
- https://git.kernel.org/stable/c/e0355a0ad31a1d677b2a4514206de4902bd550e8
- https://git.kernel.org/stable/c/ffe000217c5068c5da07ccb1c0f8cce7ad767435
- https://security-tracker.debian.org/tracker/CVE-2021-47305
Affected packages
Debian:11 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source
Debian:12 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source
Debian:13 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source