CVE-2021-47043
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Feb 28, 2024
Updated: Jan 9, 2025
Summary
CVE-2021-47043 is a vulnerability affecting the Linux kernel's media driver, specifically the Venus module. This issue involves resource leaks in the error path of 'venus_probe()'. If an error occurs following a successful call to 'of_icc_get()', the necessary cleanup is not performed, leading to a resource leak. To mitigate this issue, developers are advised to use 'devm_of_icc_get()' instead of 'of_icc_get()'. Additionally, the remove function needs to be updated and the 'icc_put()' calls should be removed.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Linux Kernel
Affected Vendors
- LINUX