CVE-2021-47158

net: dsa: sja1105: add error handling in sja1105_setup()

State: Published
Severity: 7.8 High
Published: Mar 25, 2024
Updated: Aug 5, 2026
Reserved: Mar 25, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

net: dsa: sja1105: add error handling in sja1105_setup()

If any of sja1105_static_config_load(), sja1105_clocking_setup() or sja1105_devlink_setup() fails, we can't just return in the middle of sja1105_setup() or memory will leak. Add a cleanup path.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	8aa9ebccae87621d997707e4f25e53fddd7e30e4 to before dd8609f203448ca6d58ae71461208b3f6b0329b0Affected 8aa9ebccae87621d997707e4f25e53fddd7e30e4 to before 987e4ab8b8a4fcbf783069e03e7524cd39ffd563Affected 8aa9ebccae87621d997707e4f25e53fddd7e30e4 to before cec279a898a3b004411682f212215ccaea1cd0fbAffected
LinuxLinux	5.2Affected before 5.2Not affected 5.10.42 through 5.10.Not affected 5.12.9 through 5.12.Not affected 5.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.