CVE-2021-47075

nvmet: fix memory leak in nvmet_alloc_ctrl()

Medium · published March 1, 2024

CVSS v3.1
5.3
EPSS
1%
Percentile
59.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

nvmet: fix memory leak in nvmet_alloc_ctrl()

When creating ctrl in nvmet_alloc_ctrl(), if the cntlid_min is larger

than cntlid_max of the subsystem, and jumps to the

"out_free_changed_ns_list" label, but the ctrl->sqs lack of be freed.

Fix this by jumping to the "out_free_sqs" label.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00905 · 59.4th percentile
Published
2024-03-01T21:15Z
EPSS history
Timeline
  • 01 MAR 21:15Z
    nvmet: fix memory leak in nvmet_alloc_ctrl()
    cvelistv5