CVE-2021-47425

2024-05-2208:30:24

redhat.com

access.redhat.com

linux kernel

i2c

acpi

vulnerability

fixed

resource leak

reconfiguration

device addition

reference count leak

unremovable

mitigation

information

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.4%

JSON

In the Linux kernel, the following vulnerability has been resolved: i2c: acpi: fix resource leak in reconfiguration device addition acpi_i2c_find_adapter_by_handle() calls bus_find_device() which takes a reference on the adapter which is never released which will result in a reference count leak and render the adapter unremovable. Make sure to put the adapter after creating the client in the same manner that we do for OF. [wsa: fixed title]