Riskcovery

CVE-2021-47364

comedi: Fix memory leak in compat_insnlist()

State
Published
Severity
Not scored
Published
May 21, 2024
Updated
May 11, 2026
Reserved
May 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

comedi: Fix memory leak in compat_insnlist()

`compat_insnlist()` handles the 32-bit version of the `COMEDI_INSNLIST` ioctl (whenwhen `CONFIG_COMPAT` is enabled). It allocates memory to temporarily hold an array of `struct comedi_insn` converted from the 32-bit version in user space. This memory is only being freed if there is a fault while filling the array, otherwise it is leaked.

Add a call to `kfree()` to fix the leak.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • b8d47d8813055ce38c0d2ad913d5462017e52692 to before 8d6a21e4cd6a319b0662cbe4ad6199e276ac776aAffected
  • b8d47d8813055ce38c0d2ad913d5462017e52692 to before f217b6c1e28ed0b353634ce4d92a155b80bd1671Affected
  • b8d47d8813055ce38c0d2ad913d5462017e52692 to before bb509a6ffed2c8b0950f637ab5779aa818ed1596Affected
LinuxLinux
  • 5.8Affected
  • before 5.8Not affected
  • 5.10.70 through 5.10.*Not affected
  • 5.14.9 through 5.14.*Not affected
  • 5.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.