CVE-2021-47654

samples/landlock: Fix path_list memory leak

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

samples/landlock: Fix path_list memory leak

Clang static analysis reports this error

sandboxer.c:134:8: warning: Potential leak of memory pointed to by 'path_list' ret = 0; ^ path_list is allocated in parse_path() but never freed.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

Product	Versions
LinuxLinux	ba84b0bf5a164f0f523656c1e37568c30f3f3303 to before 20fbf100f84b9aeb9c91421abe1927bc152bc32bAffected ba84b0bf5a164f0f523656c1e37568c30f3f3303 to before 49b0d8bf05809df5f87e5c03e26d74bdfdab4571Affected ba84b0bf5a164f0f523656c1e37568c30f3f3303 to before 017196730299ccd6eed24bbfabed8af4ffd81530Affected ba84b0bf5a164f0f523656c1e37568c30f3f3303 to before 66b513b7c64a7290c1fbb88e657f7cece992e131Affected
LinuxLinux	5.13Affected before 5.13Not affected 5.15.33 through 5.15.Not affected 5.16.19 through 5.16.Not affected 5.17.2 through 5.17.*Not affected 5.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.