Memory leak in Linux kernel - CVE-2021-47121

Vulnerability identifier: #VU90016

CSH Severity: Low

CVSS v4 BT: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-47121

CWE-ID: CWE-401

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the cfusbl_create() and cfusbl_device_notify() functions in net/caif/caif_usb.c. A local user can perform a denial of service (DoS) attack.

Linux kernel
openEuler
kernel
perf-debuginfo
kernel-tools
kernel-tools-devel
kernel-debuginfo
python2-perf
bpftool-debuginfo
kernel-tools-debuginfo
kernel-source
python3-perf
kernel-debugsource
python2-perf-debuginfo
perf
bpftool
kernel-devel
python3-perf-debuginfo

Install update from vendor's website.

Linux kernel - addressed in versions 4.4.272, 4.9.272, 4.14.236, 4.19.194, 5.4.125, 5.10.43, 5.12.10, 5.13
kernel - addressed in versions 4.19.90-2405.1.0.0248, 4.19.90-2405.1.0.0275
perf-debuginfo - addressed in versions 4.19.90-2405.1.0.0248, 4.19.90-2405.1.0.0275
kernel-tools - addressed in versions 4.19.90-2405.1.0.0248, 4.19.90-2405.1.0.0275
kernel-tools-devel - addressed in versions 4.19.90-2405.1.0.0248, 4.19.90-2405.1.0.0275
kernel-debuginfo - addressed in versions 4.19.90-2405.1.0.0248, 4.19.90-2405.1.0.0275
python2-perf - addressed in versions 4.19.90-2405.1.0.0248, 4.19.90-2405.1.0.0275
bpftool-debuginfo - addressed in versions 4.19.90-2405.1.0.0248, 4.19.90-2405.1.0.0275
kernel-tools-debuginfo - addressed in versions 4.19.90-2405.1.0.0248, 4.19.90-2405.1.0.0275
kernel-source - addressed in versions 4.19.90-2405.1.0.0248, 4.19.90-2405.1.0.0275
python3-perf - addressed in versions 4.19.90-2405.1.0.0248, 4.19.90-2405.1.0.0275
kernel-debugsource - addressed in versions 4.19.90-2405.1.0.0248, 4.19.90-2405.1.0.0275
python2-perf-debuginfo - addressed in versions 4.19.90-2405.1.0.0248, 4.19.90-2405.1.0.0275
perf - addressed in versions 4.19.90-2405.1.0.0248, 4.19.90-2405.1.0.0275
bpftool - addressed in versions 4.19.90-2405.1.0.0248, 4.19.90-2405.1.0.0275
kernel-devel - addressed in versions 4.19.90-2405.1.0.0248, 4.19.90-2405.1.0.0275
python3-perf-debuginfo - addressed in versions 4.19.90-2405.1.0.0248, 4.19.90-2405.1.0.0275

• https://git.kernel.org/stable/c/cc302e30a504e6b60a9ac8df7988646f46cd0294
• https://git.kernel.org/stable/c/81afc61cb6e2b553f2c5f992fa79e0ae73857141
• https://git.kernel.org/stable/c/e8b37f5009ea7095529790f022859711e6939c76
• https://git.kernel.org/stable/c/9ea0ab48e755d8f29fe89eb235fb86176fdb597f
• https://git.kernel.org/stable/c/4d94f530cd24c85aede6e72b8923f371b45d6886
• https://git.kernel.org/stable/c/46403c1f80b0d3f937ff9c4f5edc63bb64bc5051
• https://git.kernel.org/stable/c/dde8686985ec24d6b00487080a906609bd613ea1
• https://git.kernel.org/stable/c/7f5d86669fa4d485523ddb1d212e0a2d90bd62bb
• https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.236
• https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.194
• https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.272
• https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.272
• https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.43
• https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.10
• https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13
• https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.125

• Memory leak in Linux kernel caif
• openEuler 20.03 LTS SP4 update for kernel
• openEuler 20.03 LTS SP1 update for kernel