Vulnerability of the amd_sfh_work() function in the driver/hid/amd-sfh-hid/amd_sfh_client.c file – a driver for the Linux kernel’s user interface device subsystem, which allows an attacker to access protected information.

🗓️ 23 Jun 2025 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 2 Views

The amd_sfh_work() function leaks memory before the last reference in the amd_sfh_client.c driver, risking data access.

Reporter	Title	Published	Views	Family All 16
Circl	CVE-2021-47133	15 Mar 202422:27	–	circl
CNNVD	Linux kernel security vulnerabilities	15 Mar 202400:00	–	cnnvd
CVE	CVE-2021-47133	15 Mar 202420:14	–	cve
Cvelist	CVE-2021-47133 HID: amd_sfh: Fix memory leak in amd_sfh_work	15 Mar 202420:14	–	cvelist
Debian CVE	CVE-2021-47133	15 Mar 202420:14	–	debiancve
NVD	CVE-2021-47133	15 Mar 202421:15	–	nvd
OSV	CVE-2021-47133	15 Mar 202421:15	–	osv
OSV	UBUNTU-CVE-2021-47133	15 Mar 202421:15	–	osv
Positive Technologies	PT-2024-11183 · Linux · Linux Kernel	27 May 202100:00	–	ptsecurity
Tenable Nessus	RHEL 6 : kernel (Unpatched Vulnerability)	11 May 202400:00	–	nessus

Source	Link
git	www.git.kernel.org/stable/c/5ad755fd2b326aa2bc8910b0eb351ee6aece21b1
git	www.git.kernel.org/stable/c/29beadea66a226d744d5ffdcde6b984623053d24
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
lore	www.lore.kernel.org/linux-cve-announce/2024031514-CVE-2021-47133-1141@gregkh/
git	www.git.kernel.org/linus/5ad755fd2b326aa2bc8910b0eb351ee6aece21b1
cve	www.cve.org/CVERecord
kernel	www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.10
web	www.web.nvd.nist.gov/view/vuln/detail

23 Jun 2025 00:00Current

5.5Medium risk

Vulners AI Score5.5

CVSS 24.6

CVSS 35.5

EPSS0.00193

memory leak memory release amd_sfh_work amd_sfh_client linux kernel user interface driver protected data access