Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-47258

scsi: core: Fix error handling of scsi_host_alloc()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix error handling of scsi_host_alloc() After device is initialized via device_initialize(), or its name is set via dev_set_name(), the device has to be freed via put_device(). Otherwise device name will be leaked because it is allocated dynamically in dev_set_name(). Fix the leak by replacing kfree() with put_device(). Since scsi_host_dev_release() properly handles IDA and kthread removal, remove special-casing these from the error handling as well.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 1fa5ae857bb14f6046205171d98506d8112dd74e to < 8958181c1663e24a13434448e7d6b96b5d04900aaffected
  • 1fa5ae857bb14f6046205171d98506d8112dd74e to < db08ce595dd64ea9859f7d088b51cbfc8e685c66affected
  • 1fa5ae857bb14f6046205171d98506d8112dd74e to < 2dc85045ae65b9302a1d2e2ddd7ce4c030153a6aaffected
  • 1fa5ae857bb14f6046205171d98506d8112dd74e to < 79296e292d67fa7b5fb8d8c27343683e823872c8affected
  • 1fa5ae857bb14f6046205171d98506d8112dd74e to < 7a696ce1d5d16a33a6cd6400bbcc0339b2460e11affected
  • 1fa5ae857bb14f6046205171d98506d8112dd74e to < 45d83db4728127944b237c0c8248987df9d478e7affected
  • 1fa5ae857bb14f6046205171d98506d8112dd74e to < 66a834d092930cf41d809c0e989b13cd6f9ca006affected

Linux Linux

Default version status: affected

  • 2.6.30affected
  • 0 to < 2.6.30unaffected
  • 4.9.273 to ≤ 4.9.*unaffected
  • 4.14.237 to ≤ 4.14.*unaffected
  • 4.19.195 to ≤ 4.19.*unaffected
  • 5.4.126 to ≤ 5.4.*unaffected
  • 5.10.44 to ≤ 5.10.*unaffected
  • 5.12.11 to ≤ 5.12.*unaffected
  • 5.13 to ≤ *unaffected

References