CVE-2021-47529

In the Linux kernel, the following vulnerability has been resolved: iwlwifi: Fix memory leaks in error handling path Should an error occur (invalid TLV len or memory allocation failure), the memory already allocated in 'reduce_power_data' should be freed before returning, otherwise it is leaking.
Configurations

Configuration 1 (hide)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

History

10 Jun 2024, 18:36

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.5
First Time Linux
Linux linux Kernel
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: iwlwifi: soluciona pérdidas de memoria en la ruta de manejo de errores. Si ocurre un error (lengua TLV no válida o falla en la asignación de memoria), la memoria ya asignada en 'reduce_power_data' debe liberarse antes de regresar; de lo contrario, está goteando.
CWE CWE-401
References () https://git.kernel.org/stable/c/4768935c25403ba96e7a745645df24a51a774b7e - () https://git.kernel.org/stable/c/4768935c25403ba96e7a745645df24a51a774b7e - Patch
References () https://git.kernel.org/stable/c/a571bc28326d9f3e13f5f2d9cda2883e0631b0ce - () https://git.kernel.org/stable/c/a571bc28326d9f3e13f5f2d9cda2883e0631b0ce - Patch

24 May 2024, 15:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-05-24 15:15

Updated : 2024-06-10 18:36


NVD link : CVE-2021-47529

Mitre link : CVE-2021-47529

CVE.ORG link : CVE-2021-47529


JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime