VDB

CVE-2021-47070

CVE-2021-47070 PUBLISHED CVSS 5.5 MEDIUM

uio_hv_generic: Fix another memory leak in error handling paths

Reported by linux · Published March 1, 2024

In the Linux kernel, the following vulnerability has been resolved: uio_hv_generic: Fix another memory leak in error handling paths Memory allocated by 'vmbus_alloc_ring()' at the beginning of the probe function is never freed in the error handling path. Add the missing 'vmbus_free_ring()' call. Note that it is already freed in the .remove function.

Risk scores

CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected products

VendorProductVersions
LinuxLinuxcdfa835c6e5e87d145f9f632b58843de97509f2b, cdfa835c6e5e87d145f9f632b58843de97509f2b, cdfa835c6e5e87d145f9f632b58843de97509f2b
LinuxLinux4.20, 0, 5.10.241
linuxlinux_kernel4.20, 4.20, 4.20
LinuxLinux4.20, 0, 5.10.241

Timeline

  • Mar 1, 2024 CVE Published
  • Mar 2, 2024 EPSS Score (30 in total, the first dated here)
  • Jun 2, 2026 Security Advisory (104 in total, the first dated here)
  • Jul 13, 2026 Coalition ESS Score
  • Nov 2, 2026 Distribution Patch (94 in total, the first dated here)

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2021-47070
vulnetix vdb fixes CVE-2021-47070

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2021-47070/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›