Lucene search

K
ubuntucveUbuntu.comUB:CVE-2021-47519
HistoryMay 24, 2024 - 12:00 a.m.

CVE-2021-47519

2024-05-2400:00:00
ubuntu.com
ubuntu.com
4
linux kernel vulnerability
m_can_read_fifo
memory leak

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

In the Linux kernel, the following vulnerability has been resolved: can:
m_can: m_can_read_fifo: fix memory leak in error branch In
m_can_read_fifo(), if the second call to m_can_fifo_read() fails, the
function jump to the out_fail label and returns without calling
m_can_receive_skb(). This means that the skb previously allocated by
alloc_can_skb() is not freed. In other terms, this is a memory leak. This
patch adds a goto label to destroy the skb if an error occurs. Issue was
found with GCC -fanalyzer, please follow the link below for details.

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%