Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-47171

net: usb: fix memory leak in smsc75xx_bind

Description

In the Linux kernel, the following vulnerability has been resolved: net: usb: fix memory leak in smsc75xx_bind Syzbot reported memory leak in smsc75xx_bind(). The problem was is non-freed memory in case of errors after memory allocation. backtrace: [<ffffffff84245b62>] kmalloc include/linux/slab.h:556 [inline] [<ffffffff84245b62>] kzalloc include/linux/slab.h:686 [inline] [<ffffffff84245b62>] smsc75xx_bind+0x7a/0x334 drivers/net/usb/smsc75xx.c:1460 [<ffffffff82b5b2e6>] usbnet_probe+0x3b6/0xc30 drivers/net/usb/usbnet.c:1728

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • d0cad871703b898a442e4049c532ec39168e5b57 to < 200dbfcad8011e50c3cec269ed7b980836eeb1faaffected
  • d0cad871703b898a442e4049c532ec39168e5b57 to < 22c840596af0c09068b6cf948616e6496e59e07faffected
  • d0cad871703b898a442e4049c532ec39168e5b57 to < 9e6b8c1ff9d997e1fa16cbd2d60739adf6dc1bbcaffected
  • d0cad871703b898a442e4049c532ec39168e5b57 to < 9e6a3eccb28779710cbbafc4f4258d92509c6d07affected
  • d0cad871703b898a442e4049c532ec39168e5b57 to < b95fb96e6339e34694dd578fb6bde3575b01af17affected
  • d0cad871703b898a442e4049c532ec39168e5b57 to < 635ac38b36255d3cfb8312cf7c471334f4d537e0affected
  • d0cad871703b898a442e4049c532ec39168e5b57 to < 70c886ac93f87ae7214a0c69151a28a8075dd95baffected
  • d0cad871703b898a442e4049c532ec39168e5b57 to < 46a8b29c6306d8bbfd92b614ef65a47c900d8e70affected

Linux Linux

Default version status: affected

  • 2.6.34affected
  • 0 to < 2.6.34unaffected
  • 4.4.271 to ≤ 4.4.*unaffected
  • 4.9.271 to ≤ 4.9.*unaffected
  • 4.14.235 to ≤ 4.14.*unaffected
  • 4.19.193 to ≤ 4.19.*unaffected
  • 5.4.124 to ≤ 5.4.*unaffected
  • 5.10.42 to ≤ 5.10.*unaffected
  • 5.12.9 to ≤ 5.12.*unaffected
  • 5.13 to ≤ *unaffected

References