Riskcovery

CVE-2021-47305

dma-buf/sync_file: Don't leak fences on merge failure

State
Published
Severity
Not scored
Published
May 21, 2024
Updated
May 11, 2026
Reserved
May 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

dma-buf/sync_file: Don't leak fences on merge failure

Each add_fence() call does a dma_fence_get() on the relevant fence. In the error path, we weren't calling dma_fence_put() so all those fences got leaked. Also, in the krealloc_array failure case, we weren't freeing the fences array. Instead, ensure that i and fences are always zero-initialized and dma_fence_put() all the fences and kfree(fences) on every error path.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • a02b9dc90d844cc7df7b63264e7920cc425052d9 to before 19f51c2529339280d2c8c6427cd3e21ddf1ac3f8Affected
  • a02b9dc90d844cc7df7b63264e7920cc425052d9 to before e0355a0ad31a1d677b2a4514206de4902bd550e8Affected
  • a02b9dc90d844cc7df7b63264e7920cc425052d9 to before 41f45e91c92c8480242ea448d54e28c753b13902Affected
  • a02b9dc90d844cc7df7b63264e7920cc425052d9 to before 0d514185ae792d3a1903c8e1a83899aa996705ceAffected
  • a02b9dc90d844cc7df7b63264e7920cc425052d9 to before 19edcd97727aae9362444a859a24d99a8730cb27Affected
  • a02b9dc90d844cc7df7b63264e7920cc425052d9 to before ffe000217c5068c5da07ccb1c0f8cce7ad767435Affected
LinuxLinux
  • 4.9Affected
  • before 4.9Not affected
  • 4.14.241 through 4.14.*Not affected
  • 4.19.199 through 4.19.*Not affected
  • 5.4.135 through 5.4.*Not affected
  • 5.10.53 through 5.10.*Not affected
  • 5.13.5 through 5.13.*Not affected
  • 5.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.