← CVE Intelligence

CVE-2021-47305

dma-buf/sync_file: Don't leak fences on merge failure PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: dma-buf/sync_file: Don't leak fences on merge failure Each add_fence() call does a dma_fence_get() on the relevant fence. In the error path, we weren't calling dma_fence_put() so all those fences got leaked. Also, in the krealloc_array failure case, we weren't freeing the fences array. Instead, ensure that i and fences are always zero-initialized and dma_fence_put() all the fences and kfree(fences) on every error path.

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected a02b9dc90d844cc7df7b63264e7920cc425052d9 before 19f51c2529339280d2c8c6427cd3e21ddf1ac3f8; affected a02b9dc90d844cc7df7b63264e7920cc425052d9 before e0355a0ad31a1d677b2a4514206de4902bd550e8; affected a02b9dc90d844cc7df7b63264e7920cc425052d9 before 41f45e91c92c8480242ea448d54e28c753b13902; affected a02b9dc90d844cc7df7b63264e7920cc425052d9 before 0d514185ae792d3a1903c8e1a83899aa996705ce; affected a02b9dc90d844cc7df7b63264e7920cc425052d9 before 19edcd97727aae9362444a859a24d99a8730cb27; affected a02b9dc90d844cc7df7b63264e7920cc425052d9 before ffe000217c5068c5da07ccb1c0f8cce7ad767435
Linux / Linuxaffected 4.9; unaffected 0 before 4.9; unaffected 4.14.241 through 4.14.*; unaffected 4.19.199 through 4.19.*; unaffected 5.4.135 through 5.4.*; unaffected 5.10.53 through 5.10.*; unaffected 5.13.5 through 5.13.*; unaffected 5.14 through *

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.