CVE-2021-47171

net: usb: fix memory leak in smsc75xx_bind

published March 25, 2024

CVSS
—
EPSS
0%
Percentile
14.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net: usb: fix memory leak in smsc75xx_bind

Syzbot reported memory leak in smsc75xx_bind().

The problem was is non-freed memory in case of

errors after memory allocation.

backtrace:

[<ffffffff84245b62>] kmalloc include/linux/slab.h:556 [inline]

[<ffffffff84245b62>] kzalloc include/linux/slab.h:686 [inline]

[<ffffffff84245b62>] smsc75xx_bind+0x7a/0x334 drivers/net/usb/smsc75xx.c:1460

[<ffffffff82b5b2e6>] usbnet_probe+0x3b6/0xc30 drivers/net/usb/usbnet.c:1728

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00241 · 14.4th percentile
Published
2024-03-25T09:16Z
EPSS history
Timeline
  • 25 MAR 09:16Z
    net: usb: fix memory leak in smsc75xx_bind
    cvelistv5