Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2021-47043
HistoryFeb 28, 2024 - 8:13 a.m.

CVE-2021-47043 media: venus: core: Fix some resource leaks in the error path of 'venus_probe()'

2024-02-2808:13:48
Linux
github.com
3
linux
kernel
vulnerability
media
venus
core
resource leaks
error path
venus_probe
of_icc_get
devm_of_icc_get
remove function

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

media: venus: core: Fix some resource leaks in the error path of ‘venus_probe()’

If an error occurs after a successful ‘of_icc_get()’ call, it must be
undone.

Use ‘devm_of_icc_get()’ instead of ‘of_icc_get()’ to avoid the leak.
Update the remove function accordingly and axe the now unneeded
‘icc_put()’ calls.

CNA Affected

[
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "32f0a6ddc8c9",
        "lessThan": "00b68a747834",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "32f0a6ddc8c9",
        "lessThan": "940d01eceb3a",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "32f0a6ddc8c9",
        "lessThan": "711acdf0228d",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "32f0a6ddc8c9",
        "lessThan": "5a465c5391a8",
        "versionType": "git"
      }
    ],
    "programFiles": [
      "drivers/media/platform/qcom/venus/core.c"
    ],
    "defaultStatus": "unaffected"
  },
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "5.5"
      },
      {
        "status": "unaffected",
        "version": "0",
        "lessThan": "5.5",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "5.10.37",
        "versionType": "custom",
        "lessThanOrEqual": "5.10.*"
      },
      {
        "status": "unaffected",
        "version": "5.11.21",
        "versionType": "custom",
        "lessThanOrEqual": "5.11.*"
      },
      {
        "status": "unaffected",
        "version": "5.12.4",
        "versionType": "custom",
        "lessThanOrEqual": "5.12.*"
      },
      {
        "status": "unaffected",
        "version": "5.13",
        "versionType": "original_commit_for_fix",
        "lessThanOrEqual": "*"
      }
    ],
    "programFiles": [
      "drivers/media/platform/qcom/venus/core.c"
    ],
    "defaultStatus": "affected"
  }
]

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial