CVE-2021-47443

NFC: digital: fix possible memory leak in digital_tg_listen_mdaa()

State: Published
Severity: 5.5 Medium
Published: May 22, 2024
Updated: May 11, 2026
Reserved: May 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

NFC: digital: fix possible memory leak in digital_tg_listen_mdaa()

'params' is allocated in digital_tg_listen_mdaa(), but not free when digital_send_cmd() failed, which will cause memory leak. Fix it by freeing 'params' if digital_send_cmd() return failed.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1c7a4c24fbfd99442cc6e14dc80fcb00f118e8b8 to before 429054ec51e648d241a7e0b465cf44f6633334c5Affected 1c7a4c24fbfd99442cc6e14dc80fcb00f118e8b8 to before a67d47e32c91e2b10402cb8c081774cbf08edb2eAffected 1c7a4c24fbfd99442cc6e14dc80fcb00f118e8b8 to before b7b023e6ff567e991c31cd425b0e1d16779c938bAffected 1c7a4c24fbfd99442cc6e14dc80fcb00f118e8b8 to before 9881b0c860649f27ef2565deef011e516390f416Affected 1c7a4c24fbfd99442cc6e14dc80fcb00f118e8b8 to before 7ab488d7228a9dceb2456867f1f0919decf6efedAffected 1c7a4c24fbfd99442cc6e14dc80fcb00f118e8b8 to before 3f2960b39f22e26cf8addae93c3f5884d1c183c9Affected 1c7a4c24fbfd99442cc6e14dc80fcb00f118e8b8 to before 564249219e5b5673a8416b5181875d828c3f1e8cAffected 1c7a4c24fbfd99442cc6e14dc80fcb00f118e8b8 to before 58e7dcc9ca29c14e44267a4d0ea61e3229124907Affected
LinuxLinux	3.13Affected before 3.13Not affected 4.4.290 through 4.4.Not affected 4.9.288 through 4.9.Not affected 4.14.252 through 4.14.Not affected 4.19.213 through 4.19.Not affected 5.4.155 through 5.4.Not affected 5.10.75 through 5.10.Not affected 5.14.14 through 5.14.*Not affected 5.15 and laterNot affected

Product

Versions

LinuxLinux

1c7a4c24fbfd99442cc6e14dc80fcb00f118e8b8 to before 429054ec51e648d241a7e0b465cf44f6633334c5Affected
1c7a4c24fbfd99442cc6e14dc80fcb00f118e8b8 to before a67d47e32c91e2b10402cb8c081774cbf08edb2eAffected
1c7a4c24fbfd99442cc6e14dc80fcb00f118e8b8 to before b7b023e6ff567e991c31cd425b0e1d16779c938bAffected
1c7a4c24fbfd99442cc6e14dc80fcb00f118e8b8 to before 9881b0c860649f27ef2565deef011e516390f416Affected
1c7a4c24fbfd99442cc6e14dc80fcb00f118e8b8 to before 7ab488d7228a9dceb2456867f1f0919decf6efedAffected
1c7a4c24fbfd99442cc6e14dc80fcb00f118e8b8 to before 3f2960b39f22e26cf8addae93c3f5884d1c183c9Affected
1c7a4c24fbfd99442cc6e14dc80fcb00f118e8b8 to before 564249219e5b5673a8416b5181875d828c3f1e8cAffected
1c7a4c24fbfd99442cc6e14dc80fcb00f118e8b8 to before 58e7dcc9ca29c14e44267a4d0ea61e3229124907Affected

LinuxLinux

3.13Affected
before 3.13Not affected
4.4.290 through 4.4.*Not affected
4.9.288 through 4.9.*Not affected
4.14.252 through 4.14.*Not affected
4.19.213 through 4.19.*Not affected
5.4.155 through 5.4.*Not affected
5.10.75 through 5.10.*Not affected
5.14.14 through 5.14.*Not affected
5.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.