CVE-2021-47071

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

uio_hv_generic: Fix a memory leak in error handling paths

If 'vmbus_establish_gpadl()' fails, the (recv|send)_gpadl will not be updated and 'hv_uio_cleanup()' in the error handling path will not be able to free the corresponding buffer.

In such a case, we need to free the buffer explicitly.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-401

Affected software

VendorProductVersions
LinuxLinux>= cdfa835c6e5e87d145f9f632b58843de97509f2b, < cdd91637d4ef33e2be19a8e16e72e7d00c996d76; >= cdfa835c6e5e87d145f9f632b58843de97509f2b, < d84b5e912212b05f6b5bde9f682046accfbe0354; >= cdfa835c6e5e87d145f9f632b58843de97509f2b, < 53486c467e356e06aa37047c984fccd64d78c827; >= cdfa835c6e5e87d145f9f632b58843de97509f2b, < 3ee098f96b8b6c1a98f7f97915f8873164e6af9d
LinuxLinux4.20

References

Timeline

Published
Mar 1, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2021

CVE-2021-470725.5In the Linux kernel, the following vulnerability has been resolved: btrfs: fix removed dentries still existing after log is synced When weCVE-2021-470735.5In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios init_dellCVE-2021-470745.5In the Linux kernel, the following vulnerability has been resolved: nvme-loop: fix memory leak in nvme_loop_create_ctrl() When creating loCVE-2021-470755.3In the Linux kernel, the following vulnerability has been resolved: nvmet: fix memory leak in nvmet_alloc_ctrl() When creating ctrl in nvmCVE-2021-470765.5In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Return CQE error if invalid lkey was supplied RXE is missingCVE-2021-470775.5In the Linux kernel, the following vulnerability has been resolved: scsi: qedf: Add pointer checks in qedf_update_link_speed() The followiCVE-2021-470787.8In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Clear all QP fields if creation failed rxe_qp_do_cleanup() rCVE-2021-470795.5In the Linux kernel, the following vulnerability has been resolved: platform/x86: ideapad-laptop: fix a NULL pointer dereference The thirdCVE-2021-470805.5In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Prevent divide-by-zero error triggered by the user The userCVE-2021-470817.8In the Linux kernel, the following vulnerability has been resolved: habanalabs/gaudi: Fix a potential use after free in gaudi_memset_deviceCVE-2021-470827.8In the Linux kernel, the following vulnerability has been resolved: tun: avoid double free in tun_free_netdev Avoid double free in tun_freCVE-2021-470837.1In the Linux kernel, the following vulnerability has been resolved: pinctrl: mediatek: fix global-out-of-bounds issue When eint virtual ei
CVE-2021-47071: Medium severity, CVSS 5.5 | Vulnix