CVE-2021-47305

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

dma-buf/sync_file: Don't leak fences on merge failure

Each add_fence() call does a dma_fence_get() on the relevant fence. In the error path, we weren't calling dma_fence_put() so all those fences got leaked. Also, in the krealloc_array failure case, we weren't freeing the fences array. Instead, ensure that i and fences are always zero-initialized and dma_fence_put() all the fences and kfree(fences) on every error path.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-617

Affected software

VendorProductVersions
LinuxLinux>= a02b9dc90d844cc7df7b63264e7920cc425052d9, < 19f51c2529339280d2c8c6427cd3e21ddf1ac3f8; >= a02b9dc90d844cc7df7b63264e7920cc425052d9, < e0355a0ad31a1d677b2a4514206de4902bd550e8; >= a02b9dc90d844cc7df7b63264e7920cc425052d9, < 41f45e91c92c8480242ea448d54e28c753b13902; >= a02b9dc90d844cc7df7b63264e7920cc425052d9, < 0d514185ae792d3a1903c8e1a83899aa996705ce; >= a02b9dc90d844cc7df7b63264e7920cc425052d9, < 19edcd97727aae9362444a859a24d99a8730cb27; >= a02b9dc90d844cc7df7b63264e7920cc425052d9, < ffe000217c5068c5da07ccb1c0f8cce7ad767435
LinuxLinux4.9

References

Timeline

Published
May 21, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2021

CVE-2021-473067.8In the Linux kernel, the following vulnerability has been resolved: net: fddi: fix UAF in fza_probe fp is netdev private data and it cannoCVE-2021-473075.5In the Linux kernel, the following vulnerability has been resolved: cifs: prevent NULL deref in cifs_compose_mount_options() The optional CVE-2021-473088.8In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix array index out of bound exception Fix array index ouCVE-2021-473097.1In the Linux kernel, the following vulnerability has been resolved: net: validate lwtstate->data before returning from skb_tunnel_info() sCVE-2021-473107.8In the Linux kernel, the following vulnerability has been resolved: net: ti: fix UAF in tlan_remove_one priv is netdev private data and itCVE-2021-473117.8In the Linux kernel, the following vulnerability has been resolved: net: qcom/emac: fix UAF in emac_remove adpt is netdev private data andCVE-2021-473125.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: Fix dereference of null pointer flow In the caseCVE-2021-473138.4In the Linux kernel, the following vulnerability has been resolved: cpufreq: CPPC: Fix potential memleak in cppc_cpufreq_cpu_init It's a cCVE-2021-473145.5In the Linux kernel, the following vulnerability has been resolved: memory: fsl_ifc: fix leak of private memory on probe failure On probe CVE-2021-473155.5In the Linux kernel, the following vulnerability has been resolved: memory: fsl_ifc: fix leak of IO mapping on probe failure On probe erroCVE-2021-473165.5In the Linux kernel, the following vulnerability has been resolved: nfsd: fix NULL dereference in nfs3svc_encode_getaclres In error cases CVE-2021-473173.3In the Linux kernel, the following vulnerability has been resolved: powerpc/bpf: Fix detecting BPF atomic instructions Commit 91c960b00566
CVE-2021-47305: Medium severity, CVSS 5.5 | Vulnix