Tracker / CVE-2021-47305
CVE-2021-47305
Medium 5.5
In the Linux kernel, the following vulnerability has been resolved: dma-buf/sync_file: Don't leak fences on merge failure Each add_fence() call does a dma_fence_get() on the relevant fence. In the error path, we weren't calling dma_fence_put() so all those fences got leaked. Also, in the krealloc_array failure case, we weren't freeing the fences array. Instead, ensure that i and fences are always zero-initialized and dma_fence_put() all the fences and kfree(fences) on every error path.
Affected products and versions
| linux | linux_kernel |
|---|---|
| linux | linux_kernel · 4.15 → 4.19.199 |
| linux | linux_kernel · 4.20 → 5.4.135 |
| linux | linux_kernel · 4.9 → 4.14.241 |
| linux | linux_kernel · 5.11 → 5.13.5 |
| linux | linux_kernel · 5.5 → 5.10.53 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.