Riskcovery

CVE-2021-47671

can: etas_es58x: es58x_rx_err_msg(): fix memory leak in error path

State
Published
Severity
3.3 Low
Published
Apr 17, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

can: etas_es58x: es58x_rx_err_msg(): fix memory leak in error path

In es58x_rx_err_msg(), if can->do_set_mode() fails, the function directly returns without calling netif_rx(skb). This means that the skb previously allocated by alloc_can_err_skb() is not freed. In other terms, this is a memory leak.

This patch simply removes the return statement in the error branch and let the function continue.

Issue was found with GCC -fanalyzer, please follow the link below for details.

Scores

CVSSScoreVectorSource
3.13.3 LowCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:LCISA-ADP

Weaknesses

  • CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

ProductVersions
LinuxLinux
  • 8537257874e949a59c834cecfd5a063e11b64b0b to before 4f389e1276a5389c92cef860c9fde8e1c802a871Affected
  • 8537257874e949a59c834cecfd5a063e11b64b0b to before 7eb0881aec26099089f12ae850aebd93190b1dfeAffected
  • 8537257874e949a59c834cecfd5a063e11b64b0b to before d9447f768bc8c60623e4bb3ce65b8f4654d33a50Affected
LinuxLinux
  • 5.13Affected
  • before 5.13Not affected
  • 5.14.19 through 5.14.*Not affected
  • 5.15.3 through 5.15.*Not affected
  • 5.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.