CVE - CVE-2021-47258

CVE-ID
CVE-2021-47258	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix error handling of scsi_host_alloc() After device is initialized via device_initialize(), or its name is set via dev_set_name(), the device has to be freed via put_device(). Otherwise device name will be leaked because it is allocated dynamically in dev_set_name(). Fix the leak by replacing kfree() with put_device(). Since scsi_host_dev_release() properly handles IDA and kthread removal, remove special-casing these from the error handling as well.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/2dc85045ae65b9302a1d2e2ddd7ce4c030153a6a URL:https://git.kernel.org/stable/c/2dc85045ae65b9302a1d2e2ddd7ce4c030153a6a MISC:https://git.kernel.org/stable/c/45d83db4728127944b237c0c8248987df9d478e7 URL:https://git.kernel.org/stable/c/45d83db4728127944b237c0c8248987df9d478e7 MISC:https://git.kernel.org/stable/c/66a834d092930cf41d809c0e989b13cd6f9ca006 URL:https://git.kernel.org/stable/c/66a834d092930cf41d809c0e989b13cd6f9ca006 MISC:https://git.kernel.org/stable/c/79296e292d67fa7b5fb8d8c27343683e823872c8 URL:https://git.kernel.org/stable/c/79296e292d67fa7b5fb8d8c27343683e823872c8 MISC:https://git.kernel.org/stable/c/7a696ce1d5d16a33a6cd6400bbcc0339b2460e11 URL:https://git.kernel.org/stable/c/7a696ce1d5d16a33a6cd6400bbcc0339b2460e11 MISC:https://git.kernel.org/stable/c/8958181c1663e24a13434448e7d6b96b5d04900a URL:https://git.kernel.org/stable/c/8958181c1663e24a13434448e7d6b96b5d04900a MISC:https://git.kernel.org/stable/c/db08ce595dd64ea9859f7d088b51cbfc8e685c66 URL:https://git.kernel.org/stable/c/db08ce595dd64ea9859f7d088b51cbfc8e685c66
Assigning CNA
kernel.org
Date Record Created
20240410	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240410)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)