Memory leak in Linux kernel - CVE-2021-46906

Vulnerability identifier: #VU87992

CSH Severity: Low

CVSS v4 BT: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-46906

CWE-ID: CWE-401

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to perform DoS attack on the target system.

The vulnerability exists due memory leak within the hid_submit_ctrl() function in drivers/hid/usbhid/hid-core.c. A local user can force the driver to leak memory and perform denial of service attack.

Linux kernel
openEuler
Dell Data Protection Central
PowerProtect DP Series Appliance (IDPA)
Storage Resource Manager
EMC Cloud Tiering Appliance
kernel-debuginfo
kernel-tools
perf-debuginfo
python2-perf
kernel-devel
python3-perf
python2-perf-debuginfo
bpftool-debuginfo
kernel-tools-debuginfo
kernel-tools-devel
kernel-debugsource
python3-perf-debuginfo
bpftool
perf
kernel-source
kernel
Dell EMC Storage Monitoring and Reporting (SMR)
Dell Secure Connect Gateway

Install updates from vendor's website.

Linux kernel - addressed in versions 4.4.274, 4.9.274, 4.14.238, 4.19.196, 5.4.127, 5.10.45, 5.12.12, 5.13
kernel-debuginfo - addressed in versions 4.19.90-2403.3.0.0244, 4.19.90-2403.4.0.0271
kernel-tools - addressed in versions 4.19.90-2403.3.0.0244, 4.19.90-2403.4.0.0271
perf-debuginfo - addressed in versions 4.19.90-2403.3.0.0244, 4.19.90-2403.4.0.0271
python2-perf - addressed in versions 4.19.90-2403.3.0.0244, 4.19.90-2403.4.0.0271
kernel-devel - addressed in versions 4.19.90-2403.3.0.0244, 4.19.90-2403.4.0.0271
python3-perf - addressed in versions 4.19.90-2403.3.0.0244, 4.19.90-2403.4.0.0271
python2-perf-debuginfo - addressed in versions 4.19.90-2403.3.0.0244, 4.19.90-2403.4.0.0271
bpftool-debuginfo - addressed in versions 4.19.90-2403.3.0.0244, 4.19.90-2403.4.0.0271
kernel-tools-debuginfo - addressed in versions 4.19.90-2403.3.0.0244, 4.19.90-2403.4.0.0271
kernel-tools-devel - addressed in versions 4.19.90-2403.3.0.0244, 4.19.90-2403.4.0.0271
kernel-debugsource - addressed in versions 4.19.90-2403.3.0.0244, 4.19.90-2403.4.0.0271
python3-perf-debuginfo - addressed in versions 4.19.90-2403.3.0.0244, 4.19.90-2403.4.0.0271
bpftool - addressed in versions 4.19.90-2403.3.0.0244, 4.19.90-2403.4.0.0271
perf - addressed in versions 4.19.90-2403.3.0.0244, 4.19.90-2403.4.0.0271
kernel-source - addressed in versions 4.19.90-2403.3.0.0244, 4.19.90-2403.4.0.0271
kernel - addressed in versions 4.19.90-2403.3.0.0244, 4.19.90-2403.4.0.0271
Storage Resource Manager - update to 5.0.1.0
Dell EMC Storage Monitoring and Reporting (SMR) - update to 5.0.1.0
Dell Secure Connect Gateway - update to 5.24.00.14
EMC Cloud Tiering Appliance - update to 13.2.0.2.29

• https://git.kernel.org/stable/c/c5d3c142f2d57d40c55e65d5622d319125a45366
• https://git.kernel.org/stable/c/41b1e71a2c57366b08dcca1a28b0d45ca69429ce
• https://git.kernel.org/stable/c/8c064eece9a51856f3f275104520c7e3017fc5c0
• https://git.kernel.org/stable/c/0e280502be1b003c3483ae03fc60dea554fcfa82
• https://git.kernel.org/stable/c/7f5a4b24cdbd7372770a02f23e347d7d9a9ac8f1
• https://git.kernel.org/stable/c/b1e3596416d74ce95cc0b7b38472329a3818f8a9
• https://git.kernel.org/stable/c/21883bff0fd854e07429a773ff18f1e9658f50e8
• https://git.kernel.org/stable/c/6be388f4a35d2ce5ef7dbf635a8964a5da7f799f
• https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.238
• https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.196
• https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.274
• https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.274
• https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.45
• https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.12
• https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13
• https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.127

• Memory leak in Linux kernel usbhid
• Multiple vulnerabilities in Dell Secure Connect Gateway
• Multiple vulnerabilities in Dell Cloud Tiering Appliance
• openEuler 20.03 LTS SP1 update for kernel
• openEuler 20.03 LTS SP4 update for kernel
• Multiple vulnerabilities in Dell Storage Resource Manager (SRM) and Dell Storage Monitoring and Reporting (SMR)
• Multiple vulnerabilities in Dell Data Protection Central