CVE-2021-47009

KEYS: trusted: Fix memory leak on object td

State: Published
Severity: Not scored
Published: Feb 28, 2024
Updated: May 23, 2026
Reserved: Feb 27, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

KEYS: trusted: Fix memory leak on object td

Two error return paths are neglecting to free allocated object td, causing a memory leak. Fix this by returning via the error return path that securely kfree's td.

Fixes clang scan-build warning: security/keys/trusted-keys/trusted_tpm1.c:496:10: warning: Potential memory leak [unix.Malloc]

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	9d83cc1a1e7f494aedee2aa108e801d11525fccf to before 31c9a4b24d86cbb36ff0d7a085725a3b4f0138c8Affected 8cfc8d62942105e5df4a20a15b24da077a6b24ef to before 1c4031014106aff48e1e686e40101c31eab5d44cAffected 5df16caada3fba3b21cb09b85cdedf99507f4ec1 to before 3e24fbd37e72e8a67b74991970fecc82d14f57afAffected 5df16caada3fba3b21cb09b85cdedf99507f4ec1 to before 83a775d5f9bfda95b1c295f95a3a041a40c7f321Affected 5.10.20 to before 5.10.38Affected 5.11.3 to before 5.11.22Affected
LinuxLinux	5.12Affected before 5.12Not affected 5.10.38 through 5.10.Not affected 5.11.22 through 5.11.Not affected 5.12.5 through 5.12.*Not affected 5.13 and laterNot affected

Product

Versions

LinuxLinux

9d83cc1a1e7f494aedee2aa108e801d11525fccf to before 31c9a4b24d86cbb36ff0d7a085725a3b4f0138c8Affected
8cfc8d62942105e5df4a20a15b24da077a6b24ef to before 1c4031014106aff48e1e686e40101c31eab5d44cAffected
5df16caada3fba3b21cb09b85cdedf99507f4ec1 to before 3e24fbd37e72e8a67b74991970fecc82d14f57afAffected
5df16caada3fba3b21cb09b85cdedf99507f4ec1 to before 83a775d5f9bfda95b1c295f95a3a041a40c7f321Affected
5.10.20 to before 5.10.38Affected
5.11.3 to before 5.11.22Affected

LinuxLinux

5.12Affected
before 5.12Not affected
5.10.38 through 5.10.*Not affected
5.11.22 through 5.11.*Not affected
5.12.5 through 5.12.*Not affected
5.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.