CVE-2021-47057

crypto: sun8i-ss - Fix memory leak of object d when dma_iv fails to map

State
Published
Severity
5.5 Medium
Published
Feb 29, 2024
Updated
May 11, 2026
Reserved
Feb 29, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: sun8i-ss - Fix memory leak of object d when dma_iv fails to map

In the case where the dma_iv mapping fails, the return error path leaks the memory allocated to object d. Fix this by adding a new error return label and jumping to this to ensure d is free'd before the return.

Addresses-Coverity: ("Resource leak")

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

  • CWE-770 Allocation of Resources Without Limits or Throttling

Affected Products

ProductVersions
LinuxLinux
  • ac2614d721dea2ff273af19c6c5d508d58a2bb3e to before 617ec35ed51f731a593ae7274228ef2cfc9cb781Affected
  • ac2614d721dea2ff273af19c6c5d508d58a2bb3e to before e1f2d739849c3239df1ea3f97d40bade4b808410Affected
  • ac2614d721dea2ff273af19c6c5d508d58a2bb3e to before 6516cb852d704ff8d615de1f93cd443a99736c3dAffected
  • ac2614d721dea2ff273af19c6c5d508d58a2bb3e to before 98b5ef3e97b16eaeeedb936f8bda3594ff84a70eAffected
LinuxLinux
  • 5.10Affected
  • before 5.10Not affected
  • 5.10.37 through 5.10.*Not affected
  • 5.11.21 through 5.11.*Not affected
  • 5.12.4 through 5.12.*Not affected
  • 5.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.