CVE-2021-47070

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

uio_hv_generic: Fix another memory leak in error handling paths

Memory allocated by 'vmbus_alloc_ring()' at the beginning of the probe function is never freed in the error handling path.

Add the missing 'vmbus_free_ring()' call.

Note that it is already freed in the .remove function.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-401

Affected software

VendorProductVersions
LinuxLinux>= cdfa835c6e5e87d145f9f632b58843de97509f2b, < 261bbd90cc53d2835343f056770156cf1e82cf03; >= cdfa835c6e5e87d145f9f632b58843de97509f2b, < 5f59240cf25b2f7a0fdffc2701482a70310fec07; >= cdfa835c6e5e87d145f9f632b58843de97509f2b, < 0b0226be3a52dadd965644bc52a807961c2c26df
LinuxLinux4.20

References

Timeline

Published
Mar 1, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-470715.5In the Linux kernel, the following vulnerability has been resolved: uio_hv_generic: Fix a memory leak in error handling paths If 'vmbus_esCVE-2021-470725.5In the Linux kernel, the following vulnerability has been resolved: btrfs: fix removed dentries still existing after log is synced When weCVE-2021-470735.5In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios init_dellCVE-2021-470745.5In the Linux kernel, the following vulnerability has been resolved: nvme-loop: fix memory leak in nvme_loop_create_ctrl() When creating loCVE-2021-470755.3In the Linux kernel, the following vulnerability has been resolved: nvmet: fix memory leak in nvmet_alloc_ctrl() When creating ctrl in nvmCVE-2021-470765.5In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Return CQE error if invalid lkey was supplied RXE is missingCVE-2021-470775.5In the Linux kernel, the following vulnerability has been resolved: scsi: qedf: Add pointer checks in qedf_update_link_speed() The followiCVE-2021-470787.8In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Clear all QP fields if creation failed rxe_qp_do_cleanup() rCVE-2021-470795.5In the Linux kernel, the following vulnerability has been resolved: platform/x86: ideapad-laptop: fix a NULL pointer dereference The thirdCVE-2021-470805.5In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Prevent divide-by-zero error triggered by the user The userCVE-2021-470817.8In the Linux kernel, the following vulnerability has been resolved: habanalabs/gaudi: Fix a potential use after free in gaudi_memset_deviceCVE-2021-470827.8In the Linux kernel, the following vulnerability has been resolved: tun: avoid double free in tun_free_netdev Avoid double free in tun_fre
CVE-2021-47070: Medium severity, CVSS 5.5 | Vulnix