CVE-2021-47499

iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove

State: Published
Severity: Not scored
Published: May 24, 2024
Updated: May 11, 2026
Reserved: May 22, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove

When ACPI type is ACPI_SMO8500, the data->dready_trig will not be set, the memory allocated by iio_triggered_buffer_setup() will not be freed, and cause memory leak as follows:

unreferenced object 0xffff888009551400 (size 512): comm "i2c-SMO8500-125", pid 911, jiffies 4294911787 (age 83.852s) hex dump (first 32 bytes): 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 20 e2 e5 c0 ff ff ff ff ........ ....... backtrace: [<0000000041ce75ee>] kmem_cache_alloc_trace+0x16d/0x360 [<000000000aeb17b0>] iio_kfifo_allocate+0x41/0x130 [kfifo_buf] [<000000004b40c1f5>] iio_triggered_buffer_setup_ext+0x2c/0x210 [industrialio_triggered_buffer] [<000000004375b15f>] kxcjk1013_probe+0x10c3/0x1d81 [kxcjk_1013]

Fix it by remove data->dready_trig condition in probe and remove.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	a25691c1f9674090fb66586cf4c5d60d3efdf339 to before 8c1d43f3a3fc7184c42d7398bdf59a2a2903e4fcAffected a25691c1f9674090fb66586cf4c5d60d3efdf339 to before 60a55b9d91ba99eb8cf015bc46dc2de05e168a15Affected a25691c1f9674090fb66586cf4c5d60d3efdf339 to before 3899700ddacbf7aaafadf44464fff3ff0d4e3307Affected a25691c1f9674090fb66586cf4c5d60d3efdf339 to before a3730f74159ad00a28960c0efe2a931fe6fe6b45Affected a25691c1f9674090fb66586cf4c5d60d3efdf339 to before 8c163a14277115ca962103910ab4cce55e862ffbAffected a25691c1f9674090fb66586cf4c5d60d3efdf339 to before ee86d0bad80bdcd11a87e188a596727f41b62320Affected a25691c1f9674090fb66586cf4c5d60d3efdf339 to before 14508fe13b1c578b3d2ba574f1d48b351975860cAffected a25691c1f9674090fb66586cf4c5d60d3efdf339 to before 70c9774e180d151abaab358108e3510a8e615215Affected
LinuxLinux	4.2Affected before 4.2Not affected 4.4.295 through 4.4.Not affected 4.9.293 through 4.9.Not affected 4.14.258 through 4.14.Not affected 4.19.221 through 4.19.Not affected 5.4.165 through 5.4.Not affected 5.10.85 through 5.10.Not affected 5.15.8 through 5.15.*Not affected 5.16 and laterNot affected

Product

Versions

LinuxLinux

a25691c1f9674090fb66586cf4c5d60d3efdf339 to before 8c1d43f3a3fc7184c42d7398bdf59a2a2903e4fcAffected
a25691c1f9674090fb66586cf4c5d60d3efdf339 to before 60a55b9d91ba99eb8cf015bc46dc2de05e168a15Affected
a25691c1f9674090fb66586cf4c5d60d3efdf339 to before 3899700ddacbf7aaafadf44464fff3ff0d4e3307Affected
a25691c1f9674090fb66586cf4c5d60d3efdf339 to before a3730f74159ad00a28960c0efe2a931fe6fe6b45Affected
a25691c1f9674090fb66586cf4c5d60d3efdf339 to before 8c163a14277115ca962103910ab4cce55e862ffbAffected
a25691c1f9674090fb66586cf4c5d60d3efdf339 to before ee86d0bad80bdcd11a87e188a596727f41b62320Affected
a25691c1f9674090fb66586cf4c5d60d3efdf339 to before 14508fe13b1c578b3d2ba574f1d48b351975860cAffected
a25691c1f9674090fb66586cf4c5d60d3efdf339 to before 70c9774e180d151abaab358108e3510a8e615215Affected

LinuxLinux

4.2Affected
before 4.2Not affected
4.4.295 through 4.4.*Not affected
4.9.293 through 4.9.*Not affected
4.14.258 through 4.14.*Not affected
4.19.221 through 4.19.*Not affected
5.4.165 through 5.4.*Not affected
5.10.85 through 5.10.*Not affected
5.15.8 through 5.15.*Not affected
5.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.