In the Linux kernel, the following vulnerability has been resolved: media: zr364xx: fix memory leak in zr364xx_start_readpipe syzbot reported memory leak in zr364xx driver. The problem was in non-freed urb in case of usb_submit_urb() fail. backtrace: [<ffffffff82baedf6>] kmalloc include/linux/slab.h:561 [inline] [<ffffffff82baedf6>] usb_alloc_urb+0x66/0xe0 drivers/usb/core/urb.c:74 [<ffffffff82f7cce8>] zr364xx_start_readpipe+0x78/0x130 drivers/media/usb/zr364xx/zr364xx.c:1022 [<ffffffff84251dfc>] zr364xx_board_init drivers/media/usb/zr364xx/zr364xx.c:1383 [inline] [<ffffffff84251dfc>] zr364xx_probe+0x6a3/0x851 drivers/media/usb/zr364xx/zr364xx.c:1516 [<ffffffff82bb6507>] usb_probe_interface+0x177/0x370 drivers/usb/core/driver.c:396 [<ffffffff826018a9>] really_probe+0x159/0x500 drivers/base/dd.c:576

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

No data.

References
Link Providers
https://git.kernel.org/stable/c/021c294dff030f3ba38eb81e400ba123db32ecbc cve-icon cve-icon
https://git.kernel.org/stable/c/0a045eac8d0427b64577a24d74bb8347c905ac65 cve-icon cve-icon
https://git.kernel.org/stable/c/0edd6759167295ea9969e89283b81017b4c688aa cve-icon cve-icon
https://git.kernel.org/stable/c/5f3f81f1c96b501d180021c23c25e9f48eaab235 cve-icon cve-icon
https://git.kernel.org/stable/c/b0633051a6cb24186ff04ce1af99c7de18c1987e cve-icon cve-icon
https://git.kernel.org/stable/c/bbc80a972a3c5d7eba3f6c9c07af8fea42f5c513 cve-icon cve-icon
https://git.kernel.org/stable/c/c57b2bd3247925e253729dce283d6bf6abc9339d cve-icon cve-icon
https://git.kernel.org/stable/c/c57bfd8000d7677bf435873b440eec0c47f73a08 cve-icon cve-icon
https://git.kernel.org/stable/c/d69b39d89f362cfeeb54a68690768d0d257b2c8f cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024052138-CVE-2021-47344-ea37@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2021-47344 cve-icon
https://www.cve.org/CVERecord?id=CVE-2021-47344 cve-icon
History

Tue, 24 Dec 2024 16:30:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
Metrics cvssV3_1

{'score': 4.1, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H'}

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-05-21T14:35:50.953Z

Updated: 2024-12-19T07:40:07.720Z

Reserved: 2024-05-21T14:28:16.980Z

Link: CVE-2021-47344

cve-icon Vulnrichment

Updated: 2024-08-04T05:32:08.579Z

cve-icon NVD

Status : Analyzed

Published: 2024-05-21T15:15:21.067

Modified: 2024-12-24T16:13:44.487

Link: CVE-2021-47344

cve-icon Redhat

Severity : Low

Publid Date: 2024-05-21T00:00:00Z

Links: CVE-2021-47344 - Bugzilla