CVE-2021-47313

cpufreq: CPPC: Fix potential memleak in cppc_cpufreq_cpu_init

High · published May 21, 2024

CVSS v3.1
8.4
EPSS
0%
Percentile
16.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

cpufreq: CPPC: Fix potential memleak in cppc_cpufreq_cpu_init

It's a classic example of memleak, we allocate something, we fail and

never free the resources.

Make sure we free all resources on policy ->init() failures.

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00258 · 16.5th percentile
Published
2024-05-21T14:35Z
EPSS history
Timeline
  • 21 MAY 14:35Z
    cpufreq: CPPC: Fix potential memleak in cppc_cpufreq_cpu_init
    cvelistv5