Vulnerability of the sa_run() function in the drivers/crypto/sa2ul.c module – A driver for the Linux kernel cryptographic accelerator, which allows an attacker to gain access to protected information

🗓️ 23 Jun 2025 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 8 Views

The sa_run() function in drivers/crypto/sa2ul.c leaks memory before the last reference, risking data exposure.

Reporter	Title	Published	Views	Family All 17
Circl	CVE-2021-47052	28 Feb 202422:12	–	circl
CNNVD	Linux kernel security vulnerabilities	28 Feb 202400:00	–	cnnvd
CVE	CVE-2021-47052	28 Feb 202408:13	–	cve
Cvelist	CVE-2021-47052 crypto: sa2ul - Fix memory leak of rxd	28 Feb 202408:13	–	cvelist
Debian CVE	CVE-2021-47052	28 Feb 202408:13	–	debiancve
NVD	CVE-2021-47052	28 Feb 202409:15	–	nvd
OSV	DEBIAN-CVE-2021-47052	28 Feb 202409:15	–	osv
OSV	UBUNTU-CVE-2021-47052	28 Feb 202409:15	–	osv
Prion	Spoofing	28 Feb 202409:15	–	prion
Positive Technologies	PT-2024-11142 · Linux · Linux Kernel	9 Apr 202100:00	–	ptsecurity

Source	Link
git	www.git.kernel.org/stable/c/0e596b3734649041ed77edc86a23c0442bbe062b
git	www.git.kernel.org/stable/c/b7bd0657c2036add71981d88a7fae50188150b6e
git	www.git.kernel.org/stable/c/dfd6443bf49ac17adf882ca46c40c506a0284bd6
git	www.git.kernel.org/stable/c/854b7737199848a91f6adfa0a03cf6f0c46c86e8
lore	www.lore.kernel.org/linux-cve-announce/2024022841-CVE-2021-47052-3cca@gregkh/T/
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
git	www.git.kernel.org/linus/854b7737199848a91f6adfa0a03cf6f0c46c86e8
cve	www.cve.org/CVERecord
lore	www.lore.kernel.org/linux-cve-announce/2024022841-CVE-2021-47052-3cca@gregkh/
git	www.git.linuxtesting.ru/pub/scm/linux/kernel/git/lvc/linux-stable.git/commit/

23 Jun 2025 00:00Current

5.5Medium risk

Vulners AI Score5.5

CVSS 24.6

CVSS 35.5

EPSS0.00236

sa_run vulnerability memory leak protected data access linux kernel cryptographic accelerator sa2ul driver