Riskcovery

CVE-2021-47648

gpu: host1x: Fix a memory leak in 'host1x_remove()'

State
Published
Severity
5.5 Medium
Published
Feb 26, 2025
Updated
May 11, 2026
Reserved
Feb 26, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

gpu: host1x: Fix a memory leak in 'host1x_remove()'

Add a missing 'host1x_channel_list_free()' call in the remove function, as already done in the error handling path of the probe function.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

  • CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

ProductVersions
LinuxLinux
  • 8474b02531c4881a762c52ef869c52429e38633f to before 6bb107332db28a0e9256c2d36a0902b85307612cAffected
  • 8474b02531c4881a762c52ef869c52429e38633f to before c06577a80485511b894cb688e881ef0bc2d1d296Affected
  • 8474b02531c4881a762c52ef869c52429e38633f to before 5124a344983e1b9670dae7add0e4d00d589aabcdAffected
  • 8474b02531c4881a762c52ef869c52429e38633f to before fe1ce680560d4f0049ffa0c687de17567421c1ecAffected
  • 8474b02531c4881a762c52ef869c52429e38633f to before 025c6643a81564f066d8381b9e2f4603e0f8438fAffected
LinuxLinux
  • 4.13Affected
  • before 4.13Not affected
  • 5.10.110 through 5.10.*Not affected
  • 5.15.33 through 5.15.*Not affected
  • 5.16.19 through 5.16.*Not affected
  • 5.17.2 through 5.17.*Not affected
  • 5.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.