CVE-2021-47058

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

regmap: set debugfs_name to NULL after it is freed

There is a upstream commit cffa4b2122f5("regmap:debugfs: Fix a memory leak when calling regmap_attach_dev") that adds a if condition when create name for debugfs_name. With below function invoking logical, debugfs_name is freed in regmap_debugfs_exit(), but it is not created again because of the if condition introduced by above commit. regmap_reinit_cache() regmap_debugfs_exit() ... regmap_debugfs_init() So, set debugfs_name to NULL after it is freed.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

VendorProductVersions
LinuxLinux>= 5b654b03007917f3f1015b2a5c288c1ea6ae8f65, < 2dc1554d5f0fdaf47cc5bea442b84b9226fea867; >= 480c5e9c7e4c76c01d5f1f7b73832d7b77e6b427, < d8897f7b2283a500666c85ef06e820df38ed7b52; >= c9698380b01aed3281160d3ab25749b57d6913b8, < eb949f891226c012138ffd9df90d1e509f428ae6; >= cffa4b2122f5f3e53cf3d529bbc74651f95856d5, < c764e375ae647832de1ee73d43a4bb3ef8a8f43d; >= cffa4b2122f5f3e53cf3d529bbc74651f95856d5, < b9e569ae1da3a113b3acee8703c94777fd20938a; >= cffa4b2122f5f3e53cf3d529bbc74651f95856d5, < e41a962f82e7afb5b1ee644f48ad0b3aee656268; >= 4.19.168, < 4.19.191; >= 5.4.90, < 5.4.119; >= 5.10.8, < 5.10.37
LinuxLinux5.11

References

Timeline

Published
Feb 29, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2021

CVE-2021-470595.5In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ss - fix result memory leak on error path This patch fixCVE-2021-470607.8In the Linux kernel, the following vulnerability has been resolved: KVM: Stop looking for coalesced MMIO zones if the bus is destroyed AboCVE-2021-470617.8In the Linux kernel, the following vulnerability has been resolved: KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCCVE-2021-470625.5In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Use online_vcpus, not created_vcpus, to iterate over vCPUs UCVE-2021-470637.8In the Linux kernel, the following vulnerability has been resolved: drm: bridge/panel: Cleanup connector on bridge detach If we don't callCVE-2021-470645.3In the Linux kernel, the following vulnerability has been resolved: mt76: fix potential DMA mapping leak With buf uninitialized in mt76_dmCVE-2021-470657.8In the Linux kernel, the following vulnerability has been resolved: rtw88: Fix array overrun in rtw_get_tx_power_params() Using a kernel wCVE-2021-470665.5In the Linux kernel, the following vulnerability has been resolved: async_xor: increase src_offs when dropping destination page Now we supCVE-2021-470675.5In the Linux kernel, the following vulnerability has been resolved: soc/tegra: regulators: Fix locking up when voltage-spread is out of ranCVE-2021-470687.8In the Linux kernel, the following vulnerability has been resolved: net/nfc: fix use-after-free llcp_sock_bind/connect Commits 8a4cd82d ("CVE-2021-470697.0In the Linux kernel, the following vulnerability has been resolved: ipc/mqueue, msg, sem: avoid relying on a stack reference past its expirCVE-2021-470705.5In the Linux kernel, the following vulnerability has been resolved: uio_hv_generic: Fix another memory leak in error handling paths Memory
CVE-2021-47058: High severity, CVSS 7.8 | Vulnix