CVE-2021-47660

fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'

All error handling paths lead to 'out' where many resources are freed.

Do it as well here instead of a direct return, otherwise 'log', 'ra' and 'log->one_page_buf' (at least) will leak.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

Product	Versions
LinuxLinux	b46acd6a6a627d876898e1c84d3f84902264b445 to before d8be98ab88250dc12a98efdb703792a537b0eac3Affected b46acd6a6a627d876898e1c84d3f84902264b445 to before bc4a1d384a04c6dba9312e1421a9f9f7c03339a4Affected b46acd6a6a627d876898e1c84d3f84902264b445 to before 2c97519ed6b4239594c58ddacf3d0d576cf070ccAffected b46acd6a6a627d876898e1c84d3f84902264b445 to before e589f9b7078e1c0191613cd736f598e81d2390deAffected
LinuxLinux	5.15Affected before 5.15Not affected 5.15.46 through 5.15.Not affected 5.17.14 through 5.17.Not affected 5.18.3 through 5.18.*Not affected 5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.