THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Zendesk (Helpdesk and Chat)

Ok

PUBLISHED

CVE-2021-47519

can: m_can: m_can_read_fifo: fix memory leak in error branch

Reserved:2024-05-24
Published:2024-05-24
Updated:2024-06-06

Description

In the Linux kernel, the following vulnerability has been resolved: can: m_can: m_can_read_fifo: fix memory leak in error branch In m_can_read_fifo(), if the second call to m_can_fifo_read() fails, the function jump to the out_fail label and returns without calling m_can_receive_skb(). This means that the skb previously allocated by alloc_can_skb() is not freed. In other terms, this is a memory leak. This patch adds a goto label to destroy the skb if an error occurs. Issue was found with GCC -fanalyzer, please follow the link below for details.

Product status

Default status
unaffected

e39381770ec9 before 75a422165477
affected

e39381770ec9 before 31cb32a590d6
affected

Default status
affected

5.15
affected

Any version before 5.15
unaffected

5.15.8
unaffected

5.16
unaffected

References

https://git.kernel.org/stable/c/75a422165477dd12d2d20aa7c9ee7c9a281c9908

https://git.kernel.org/stable/c/31cb32a590d62b18f69a9a6d433f4e69c74fdd56

cve.org CVE-2021-47519

nvd.nist.gov CVE-2021-47519

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2021-47519