CVE-2021-47158CWE-401

CVE-2021-47158

High · published March 25, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
13.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net: dsa: sja1105: add error handling in sja1105_setup()

If any of sja1105_static_config_load(), sja1105_clocking_setup() or

sja1105_devlink_setup() fails, we can't just return in the middle of

sja1105_setup() or memory will leak. Add a cleanup path.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00233 · 13.4th percentile
Weakness
CWE-401 · Missing Release of Memory after Effective Lifetime
Published
2024-03-25T14:15Z
Affected products (5)
ProductVersionsFixed in
linux/linux_kernel≥ 5.2, < 5.10.425.10.42
linux/linux_kernel≥ 5.11, < 5.12.95.12.9
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (6)
EPSS history
Timeline
  • 25 MAR 09:16Z
    net: dsa: sja1105: add error handling in sja1105_setup()
    cvelistv5