CVE-2021-47329

scsi: megaraid_sas: Fix resource leak in case of probe failure

State: Published
Severity: 6.2 Medium
Published: May 21, 2024
Updated: May 11, 2026
Reserved: May 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: megaraid_sas: Fix resource leak in case of probe failure

The driver doesn't clean up all the allocated resources properly when scsi_add_host(), megasas_start_aen() function fails during the PCI device probe.

Clean up all those resources.

Scores

CVSS	Score	Vector	Source
3.1	6.2 Medium	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-400 Uncontrolled Resource Consumption

Affected Products

Product	Versions
LinuxLinux	541f90b7c6dffe4cf4a3e8142ac8bd047da94733 to before 0c6226601c3e191a44a57d8f9f814b7e5c308959Affected 541f90b7c6dffe4cf4a3e8142ac8bd047da94733 to before 0680db6f41920b2c91c7df3cc9cd5968701a6f74Affected 541f90b7c6dffe4cf4a3e8142ac8bd047da94733 to before 04b6b9ea80906e3b41ff120b45db31768947cf72Affected 541f90b7c6dffe4cf4a3e8142ac8bd047da94733 to before e623f79691c5104317669ab36ec316a90c05062fAffected 541f90b7c6dffe4cf4a3e8142ac8bd047da94733 to before b5438f48fdd8e1c3f130d32637511efd32038152Affected
LinuxLinux	3.0Affected before 3.0Not affected 5.4.134 through 5.4.Not affected 5.10.52 through 5.10.Not affected 5.12.19 through 5.12.Not affected 5.13.4 through 5.13.Not affected 5.14 and laterNot affected

Product

Versions

LinuxLinux

541f90b7c6dffe4cf4a3e8142ac8bd047da94733 to before 0c6226601c3e191a44a57d8f9f814b7e5c308959Affected
541f90b7c6dffe4cf4a3e8142ac8bd047da94733 to before 0680db6f41920b2c91c7df3cc9cd5968701a6f74Affected
541f90b7c6dffe4cf4a3e8142ac8bd047da94733 to before 04b6b9ea80906e3b41ff120b45db31768947cf72Affected
541f90b7c6dffe4cf4a3e8142ac8bd047da94733 to before e623f79691c5104317669ab36ec316a90c05062fAffected
541f90b7c6dffe4cf4a3e8142ac8bd047da94733 to before b5438f48fdd8e1c3f130d32637511efd32038152Affected

LinuxLinux

3.0Affected
before 3.0Not affected
5.4.134 through 5.4.*Not affected
5.10.52 through 5.10.*Not affected
5.12.19 through 5.12.*Not affected
5.13.4 through 5.13.*Not affected
5.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.