cve-2021-47455
Vulnerability from cvelistv5
Published
2024-05-22 06:19
Modified
2024-11-04 12:06
Severity ?
EPSS score ?
Summary
ptp: Fix possible memory leak in ptp_clock_register()
References
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2021-47455",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-06-10T18:55:42.625337Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-06-10T18:55:51.518Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-04T05:39:59.400Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://git.kernel.org/stable/c/95c0a0c5ec8839f8f21672be786e87a100319ca8"
},
{
"tags": [
"x_transferred"
],
"url": "https://git.kernel.org/stable/c/4225fea1cb28370086e17e82c0f69bec2779dca0"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Linux",
"programFiles": [
"drivers/ptp/ptp_clock.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"versions": [
{
"lessThan": "95c0a0c5ec88",
"status": "affected",
"version": "a33121e5487b",
"versionType": "git"
},
{
"lessThan": "4225fea1cb28",
"status": "affected",
"version": "a33121e5487b",
"versionType": "git"
}
]
},
{
"defaultStatus": "affected",
"product": "Linux",
"programFiles": [
"drivers/ptp/ptp_clock.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"versions": [
{
"status": "affected",
"version": "5.5"
},
{
"lessThan": "5.5",
"status": "unaffected",
"version": "0",
"versionType": "semver"
},
{
"lessThanOrEqual": "5.14.*",
"status": "unaffected",
"version": "5.14.15",
"versionType": "semver"
},
{
"lessThanOrEqual": "*",
"status": "unaffected",
"version": "5.15",
"versionType": "original_commit_for_fix"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nptp: Fix possible memory leak in ptp_clock_register()\n\nI got memory leak as follows when doing fault injection test:\n\nunreferenced object 0xffff88800906c618 (size 8):\n comm \"i2c-idt82p33931\", pid 4421, jiffies 4294948083 (age 13.188s)\n hex dump (first 8 bytes):\n 70 74 70 30 00 00 00 00 ptp0....\n backtrace:\n [\u003c00000000312ed458\u003e] __kmalloc_track_caller+0x19f/0x3a0\n [\u003c0000000079f6e2ff\u003e] kvasprintf+0xb5/0x150\n [\u003c0000000026aae54f\u003e] kvasprintf_const+0x60/0x190\n [\u003c00000000f323a5f7\u003e] kobject_set_name_vargs+0x56/0x150\n [\u003c000000004e35abdd\u003e] dev_set_name+0xc0/0x100\n [\u003c00000000f20cfe25\u003e] ptp_clock_register+0x9f4/0xd30 [ptp]\n [\u003c000000008bb9f0de\u003e] idt82p33_probe.cold+0x8b6/0x1561 [ptp_idt82p33]\n\nWhen posix_clock_register() returns an error, the name allocated\nin dev_set_name() will be leaked, the put_device() should be used\nto give up the device reference, then the name will be freed in\nkobject_cleanup() and other memory will be freed in ptp_clock_release()."
}
],
"providerMetadata": {
"dateUpdated": "2024-11-04T12:06:16.711Z",
"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"shortName": "Linux"
},
"references": [
{
"url": "https://git.kernel.org/stable/c/95c0a0c5ec8839f8f21672be786e87a100319ca8"
},
{
"url": "https://git.kernel.org/stable/c/4225fea1cb28370086e17e82c0f69bec2779dca0"
}
],
"title": "ptp: Fix possible memory leak in ptp_clock_register()",
"x_generator": {
"engine": "bippy-9e1c9544281a"
}
}
},
"cveMetadata": {
"assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"assignerShortName": "Linux",
"cveId": "CVE-2021-47455",
"datePublished": "2024-05-22T06:19:44.700Z",
"dateReserved": "2024-05-21T14:58:30.833Z",
"dateUpdated": "2024-11-04T12:06:16.711Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2021-47455\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-05-22T07:15:10.530\",\"lastModified\":\"2024-11-21T06:36:10.873\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nptp: Fix possible memory leak in ptp_clock_register()\\n\\nI got memory leak as follows when doing fault injection test:\\n\\nunreferenced object 0xffff88800906c618 (size 8):\\n comm \\\"i2c-idt82p33931\\\", pid 4421, jiffies 4294948083 (age 13.188s)\\n hex dump (first 8 bytes):\\n 70 74 70 30 00 00 00 00 ptp0....\\n backtrace:\\n [\u003c00000000312ed458\u003e] __kmalloc_track_caller+0x19f/0x3a0\\n [\u003c0000000079f6e2ff\u003e] kvasprintf+0xb5/0x150\\n [\u003c0000000026aae54f\u003e] kvasprintf_const+0x60/0x190\\n [\u003c00000000f323a5f7\u003e] kobject_set_name_vargs+0x56/0x150\\n [\u003c000000004e35abdd\u003e] dev_set_name+0xc0/0x100\\n [\u003c00000000f20cfe25\u003e] ptp_clock_register+0x9f4/0xd30 [ptp]\\n [\u003c000000008bb9f0de\u003e] idt82p33_probe.cold+0x8b6/0x1561 [ptp_idt82p33]\\n\\nWhen posix_clock_register() returns an error, the name allocated\\nin dev_set_name() will be leaked, the put_device() should be used\\nto give up the device reference, then the name will be freed in\\nkobject_cleanup() and other memory will be freed in ptp_clock_release().\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: ptp: solucione una posible p\u00e9rdida de memoria en ptp_clock_register() Obtuve una p\u00e9rdida de memoria de la siguiente manera al realizar la prueba de inyecci\u00f3n de fallas: objeto sin referencia 0xffff88800906c618 (tama\u00f1o 8): comm \\\"i2c-idt82p33931\\\", pid 4421, jiffies 4294948083 (edad 13,188 s) volcado hexadecimal (primeros 8 bytes): 70 74 70 30 00 00 00 00 ptp0.... backtrace: [\u0026lt;00000000312ed458\u0026gt;] __kmalloc_track_caller+0x19f/0x3a0 [\u0026lt;0000 000079f6e2ff\u0026gt;] kvasprintf+0xb5 /0x150 [\u0026lt;0000000026aae54f\u0026gt;] kvasprintf_const+0x60/0x190 [\u0026lt;00000000f323a5f7\u0026gt;] kobject_set_name_vargs+0x56/0x150 [\u0026lt;000000004e35abdd\u0026gt;] dev_set_name+0xc0/0x100 0000000f20cfe25\u0026gt;] ptp_clock_register+0x9f4/0xd30 [ptp] [\u0026lt;000000008bb9f0de\u0026gt;] idt82p33_probe.cold+0x8b6/0x1561 [ptp_idt82p33] Cuando posix_clock_register() devuelve un error, el nombre asignado en dev_set_name() se filtrar\u00e1, se debe usar put_device() para renunciar a la referencia del dispositivo, luego el nombre se liberar\u00e1 kobject_cleanup() y otra memoria se liberar\u00e1n en ptp_clock_release().\"}],\"metrics\":{},\"references\":[{\"url\":\"https://git.kernel.org/stable/c/4225fea1cb28370086e17e82c0f69bec2779dca0\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/95c0a0c5ec8839f8f21672be786e87a100319ca8\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/4225fea1cb28370086e17e82c0f69bec2779dca0\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://git.kernel.org/stable/c/95c0a0c5ec8839f8f21672be786e87a100319ca8\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
}
}