Riskcovery

CVE-2021-47058

regmap: set debugfs_name to NULL after it is freed

State
Published
Severity
Not scored
Published
Feb 29, 2024
Updated
May 23, 2026
Reserved
Feb 29, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

regmap: set debugfs_name to NULL after it is freed

There is a upstream commit cffa4b2122f5("regmap:debugfs: Fix a memory leak when calling regmap_attach_dev") that adds a if condition when create name for debugfs_name. With below function invoking logical, debugfs_name is freed in regmap_debugfs_exit(), but it is not created again because of the if condition introduced by above commit. regmap_reinit_cache() regmap_debugfs_exit() ... regmap_debugfs_init() So, set debugfs_name to NULL after it is freed.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 5b654b03007917f3f1015b2a5c288c1ea6ae8f65 to before 2dc1554d5f0fdaf47cc5bea442b84b9226fea867Affected
  • 480c5e9c7e4c76c01d5f1f7b73832d7b77e6b427 to before d8897f7b2283a500666c85ef06e820df38ed7b52Affected
  • c9698380b01aed3281160d3ab25749b57d6913b8 to before eb949f891226c012138ffd9df90d1e509f428ae6Affected
  • cffa4b2122f5f3e53cf3d529bbc74651f95856d5 to before c764e375ae647832de1ee73d43a4bb3ef8a8f43dAffected
  • cffa4b2122f5f3e53cf3d529bbc74651f95856d5 to before b9e569ae1da3a113b3acee8703c94777fd20938aAffected
  • cffa4b2122f5f3e53cf3d529bbc74651f95856d5 to before e41a962f82e7afb5b1ee644f48ad0b3aee656268Affected
  • 4.19.168 to before 4.19.191Affected
  • 5.4.90 to before 5.4.119Affected
  • 5.10.8 to before 5.10.37Affected
LinuxLinux
  • 5.11Affected
  • before 5.11Not affected
  • 4.19.191 through 4.19.*Not affected
  • 5.4.119 through 5.4.*Not affected
  • 5.10.37 through 5.10.*Not affected
  • 5.11.21 through 5.11.*Not affected
  • 5.12.4 through 5.12.*Not affected
  • 5.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.