Riskcovery

CVE-2021-47075

nvmet: fix memory leak in nvmet_alloc_ctrl()

State
Published
Severity
5.3 Medium
Published
Mar 1, 2024
Updated
May 11, 2026
Reserved
Feb 29, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

nvmet: fix memory leak in nvmet_alloc_ctrl()

When creating ctrl in nvmet_alloc_ctrl(), if the cntlid_min is larger than cntlid_max of the subsystem, and jumps to the "out_free_changed_ns_list" label, but the ctrl->sqs lack of be freed. Fix this by jumping to the "out_free_sqs" label.

Scores

CVSSScoreVectorSource
3.15.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:LCISA-ADP

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 94a39d61f80fcd679debda11e1ca02b88d90e67e to before 4720f29acb3fe67aa8aa71e6b675b079d193aaebAffected
  • 94a39d61f80fcd679debda11e1ca02b88d90e67e to before afb680ed7ecbb7fd66ddb43650e9b533fd8b4b9aAffected
  • 94a39d61f80fcd679debda11e1ca02b88d90e67e to before fec356a61aa3d3a66416b4321f1279e09e0f256fAffected
LinuxLinux
  • 5.7Affected
  • before 5.7Not affected
  • 5.10.40 through 5.10.*Not affected
  • 5.12.7 through 5.12.*Not affected
  • 5.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.