Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2021-47519

can: m_can: m_can_read_fifo: fix memory leak in error branch

Description

In the Linux kernel, the following vulnerability has been resolved: can: m_can: m_can_read_fifo: fix memory leak in error branch In m_can_read_fifo(), if the second call to m_can_fifo_read() fails, the function jump to the out_fail label and returns without calling m_can_receive_skb(). This means that the skb previously allocated by alloc_can_skb() is not freed. In other terms, this is a memory leak. This patch adds a goto label to destroy the skb if an error occurs. Issue was found with GCC -fanalyzer, please follow the link below for details.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • e39381770ec9ca3c51d8b9bd9cc6e01d78ea974a to < 75a422165477dd12d2d20aa7c9ee7c9a281c9908affected
  • e39381770ec9ca3c51d8b9bd9cc6e01d78ea974a to < 31cb32a590d62b18f69a9a6d433f4e69c74fdd56affected

Linux Linux

Default version status: affected

  • 5.15affected
  • 0 to < 5.15unaffected
  • 5.15.8 to ≤ 5.15.*unaffected
  • 5.16 to ≤ *unaffected

References