CVE - CVE-2021-47305

CVE-ID
CVE-2021-47305	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: dma-buf/sync_file: Don't leak fences on merge failure Each add_fence() call does a dma_fence_get() on the relevant fence. In the error path, we weren't calling dma_fence_put() so all those fences got leaked. Also, in the krealloc_array failure case, we weren't freeing the fences array. Instead, ensure that i and fences are always zero-initialized and dma_fence_put() all the fences and kfree(fences) on every error path.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/0d514185ae792d3a1903c8e1a83899aa996705ce URL:https://git.kernel.org/stable/c/0d514185ae792d3a1903c8e1a83899aa996705ce MISC:https://git.kernel.org/stable/c/19edcd97727aae9362444a859a24d99a8730cb27 URL:https://git.kernel.org/stable/c/19edcd97727aae9362444a859a24d99a8730cb27 MISC:https://git.kernel.org/stable/c/19f51c2529339280d2c8c6427cd3e21ddf1ac3f8 URL:https://git.kernel.org/stable/c/19f51c2529339280d2c8c6427cd3e21ddf1ac3f8 MISC:https://git.kernel.org/stable/c/41f45e91c92c8480242ea448d54e28c753b13902 URL:https://git.kernel.org/stable/c/41f45e91c92c8480242ea448d54e28c753b13902 MISC:https://git.kernel.org/stable/c/e0355a0ad31a1d677b2a4514206de4902bd550e8 URL:https://git.kernel.org/stable/c/e0355a0ad31a1d677b2a4514206de4902bd550e8 MISC:https://git.kernel.org/stable/c/ffe000217c5068c5da07ccb1c0f8cce7ad767435 URL:https://git.kernel.org/stable/c/ffe000217c5068c5da07ccb1c0f8cce7ad767435
Assigning CNA
kernel.org
Date Record Created
20240521	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240521)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)