Riskcovery

CVE-2021-47655

media: venus: vdec: fixed possible memory leak issue

State
Published
Severity
5.5 Medium
Published
Feb 26, 2025
Updated
May 11, 2026
Reserved
Feb 26, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

media: venus: vdec: fixed possible memory leak issue

The venus_helper_alloc_dpb_bufs() implementation allows an early return on an error path when checking the id from ida_alloc_min() which would not release the earlier buffer allocation.

Move the direct kfree() from the error checking of dma_alloc_attrs() to the common fail path to ensure that allocations are released on all error paths in this function.

Addresses-Coverity: 1494120 ("Resource leak")

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

  • CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

ProductVersions
LinuxLinux
  • 745e6d8bbe6a6e2e40b1609cea114c129f17031a to before 5cedfe8aaf1875a5305897107b7f298db4260019Affected
  • 40d87aafee29fb01ce1e1868502fb2059a6a7f34 to before 55bccafc246b2e64763a155ec454470c07a54a6eAffected
  • 40d87aafee29fb01ce1e1868502fb2059a6a7f34 to before 5f89d05ba93df9c2cdfe493843f93288e55e99ebAffected
  • 40d87aafee29fb01ce1e1868502fb2059a6a7f34 to before 8403fdd775858a7bf04868d43daea0acbe49ddfcAffected
LinuxLinux
  • 5.16Affected
  • before 5.16Not affected
  • 5.16.19 through 5.16.*Not affected
  • 5.17.2 through 5.17.*Not affected
  • 5.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.