CVE-2021-47171

net: usb: fix memory leak in smsc75xx_bind

State: Published
Severity: Not scored
Published: Mar 25, 2024
Updated: May 11, 2026
Reserved: Mar 25, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

net: usb: fix memory leak in smsc75xx_bind

Syzbot reported memory leak in smsc75xx_bind(). The problem was is non-freed memory in case of errors after memory allocation.

backtrace: [<ffffffff84245b62>] kmalloc include/linux/slab.h:556 [inline] [<ffffffff84245b62>] kzalloc include/linux/slab.h:686 [inline] [<ffffffff84245b62>] smsc75xx_bind+0x7a/0x334 drivers/net/usb/smsc75xx.c:1460 [<ffffffff82b5b2e6>] usbnet_probe+0x3b6/0xc30 drivers/net/usb/usbnet.c:1728

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	d0cad871703b898a442e4049c532ec39168e5b57 to before 200dbfcad8011e50c3cec269ed7b980836eeb1faAffected d0cad871703b898a442e4049c532ec39168e5b57 to before 22c840596af0c09068b6cf948616e6496e59e07fAffected d0cad871703b898a442e4049c532ec39168e5b57 to before 9e6b8c1ff9d997e1fa16cbd2d60739adf6dc1bbcAffected d0cad871703b898a442e4049c532ec39168e5b57 to before 9e6a3eccb28779710cbbafc4f4258d92509c6d07Affected d0cad871703b898a442e4049c532ec39168e5b57 to before b95fb96e6339e34694dd578fb6bde3575b01af17Affected d0cad871703b898a442e4049c532ec39168e5b57 to before 635ac38b36255d3cfb8312cf7c471334f4d537e0Affected d0cad871703b898a442e4049c532ec39168e5b57 to before 70c886ac93f87ae7214a0c69151a28a8075dd95bAffected d0cad871703b898a442e4049c532ec39168e5b57 to before 46a8b29c6306d8bbfd92b614ef65a47c900d8e70Affected
LinuxLinux	2.6.34Affected before 2.6.34Not affected 4.4.271 through 4.4.Not affected 4.9.271 through 4.9.Not affected 4.14.235 through 4.14.Not affected 4.19.193 through 4.19.Not affected 5.4.124 through 5.4.Not affected 5.10.42 through 5.10.Not affected 5.12.9 through 5.12.*Not affected 5.13 and laterNot affected

Product

Versions

LinuxLinux

d0cad871703b898a442e4049c532ec39168e5b57 to before 200dbfcad8011e50c3cec269ed7b980836eeb1faAffected
d0cad871703b898a442e4049c532ec39168e5b57 to before 22c840596af0c09068b6cf948616e6496e59e07fAffected
d0cad871703b898a442e4049c532ec39168e5b57 to before 9e6b8c1ff9d997e1fa16cbd2d60739adf6dc1bbcAffected
d0cad871703b898a442e4049c532ec39168e5b57 to before 9e6a3eccb28779710cbbafc4f4258d92509c6d07Affected
d0cad871703b898a442e4049c532ec39168e5b57 to before b95fb96e6339e34694dd578fb6bde3575b01af17Affected
d0cad871703b898a442e4049c532ec39168e5b57 to before 635ac38b36255d3cfb8312cf7c471334f4d537e0Affected
d0cad871703b898a442e4049c532ec39168e5b57 to before 70c886ac93f87ae7214a0c69151a28a8075dd95bAffected
d0cad871703b898a442e4049c532ec39168e5b57 to before 46a8b29c6306d8bbfd92b614ef65a47c900d8e70Affected

LinuxLinux

2.6.34Affected
before 2.6.34Not affected
4.4.271 through 4.4.*Not affected
4.9.271 through 4.9.*Not affected
4.14.235 through 4.14.*Not affected
4.19.193 through 4.19.*Not affected
5.4.124 through 5.4.*Not affected
5.10.42 through 5.10.*Not affected
5.12.9 through 5.12.*Not affected
5.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.