CVE-2021-46924

NFC: st21nfca: Fix memory leak in device probe and remove

published February 27, 2024

CVSS
—
EPSS
0%
Percentile
12.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

NFC: st21nfca: Fix memory leak in device probe and remove

'phy->pending_skb' is alloced when device probe, but forgot to free

in the error handling path and remove path, this cause memory leak

as follows:

unreferenced object 0xffff88800bc06800 (size 512):

comm "8", pid 11775, jiffies 4295159829 (age 9.032s)

hex dump (first 32 bytes):

00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................

00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................

backtrace:

[<00000000d66c09ce>] __kmalloc_node_track_caller+0x1ed/0x450

[<00000000c93382b3>] kmalloc_reserve+0x37/0xd0

[<000000005fea522c>] __alloc_skb+0x124/0x380

[<0000000019f29f9a>] st21nfca_hci_i2c_probe+0x170/0x8f2

Fix it by freeing 'pending_skb' in error and remove.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00226 · 12.6th percentile
Published
2024-02-27T09:43Z
EPSS history
Timeline
  • 27 FEB 09:43Z
    NFC: st21nfca: Fix memory leak in device probe and remove
    cvelistv5