CVE-2021-46924

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

NFC: st21nfca: Fix memory leak in device probe and remove

'phy->pending_skb' is alloced when device probe, but forgot to free in the error handling path and remove path, this cause memory leak as follows:

unreferenced object 0xffff88800bc06800 (size 512): comm "8", pid 11775, jiffies 4295159829 (age 9.032s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<00000000d66c09ce>] __kmalloc_node_track_caller+0x1ed/0x450 [<00000000c93382b3>] kmalloc_reserve+0x37/0xd0 [<000000005fea522c>] __alloc_skb+0x124/0x380 [<0000000019f29f9a>] st21nfca_hci_i2c_probe+0x170/0x8f2

Fix it by freeing 'pending_skb' in error and remove.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-401

Affected software

VendorProductVersions
LinuxLinux>= 68957303f44a501af5cf37913208a2acaa6bcdf1, < 38c3e320e7ff46f2dc67bc5045333e63d9f8918d; >= 68957303f44a501af5cf37913208a2acaa6bcdf1, < a1e0080a35a16ce3808f7040fe0c3a8fdb052349; >= 68957303f44a501af5cf37913208a2acaa6bcdf1, < 1cd4063dbc91cf7965d73a6a3855e2028cd4613b; >= 68957303f44a501af5cf37913208a2acaa6bcdf1, < e553265ea56482da5700f56319fda9ff53e7dcb4; >= 68957303f44a501af5cf37913208a2acaa6bcdf1, < 238920381b8925d070d32d73cd9ce52ab29896fe; >= 68957303f44a501af5cf37913208a2acaa6bcdf1, < 1b9dadba502234eea7244879b8d5d126bfaf9f0c
LinuxLinux3.16

References

Timeline

Published
Feb 27, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-469254.7In the Linux kernel, the following vulnerability has been resolved: net/smc: fix kernel panic caused by race of smc_sock A crash occurs whCVE-2021-469265.5In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: intel-sdw-acpi: harden detection of controller The existingCVE-2021-469275.5In the Linux kernel, the following vulnerability has been resolved: nitro_enclaves: Use get_user_pages_unlocked() call to handle mmap asserCVE-2021-469285.5In the Linux kernel, the following vulnerability has been resolved: parisc: Clear stale IIR value on instruction access rights trap When aCVE-2021-469295.5In the Linux kernel, the following vulnerability has been resolved: sctp: use call_rcu to free endpoint This patch is to delay the endpoinCVE-2021-469305.5In the Linux kernel, the following vulnerability has been resolved: usb: mtu3: fix list_head check warning This is caused by uninitializatCVE-2021-469315.5In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Wrap the tx reporter dump callback to extract the sq FunctiCVE-2021-469325.5In the Linux kernel, the following vulnerability has been resolved: Input: appletouch - initialize work before device registration Syzbot CVE-2021-469335.5In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear. ffs_data_clearCVE-2021-469343.3In the Linux kernel, the following vulnerability has been resolved: i2c: validate user data in compat ioctl Wrong user data may cause warnCVE-2021-469355.5In the Linux kernel, the following vulnerability has been resolved: binder: fix async_free_space accounting for empty parcels In 4.13, comCVE-2021-469367.8In the Linux kernel, the following vulnerability has been resolved: net: fix use-after-free in tw_timer_handler A real world panic issue w
CVE-2021-46924: Medium severity, CVSS 5.5 | Vulnix