CVE-2021-47121
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Mar 15, 2024
Updated: Jan 7, 2025
CWE ID 401
Summary
CVE-2021-47121 is a vulnerability affecting the Linux kernel that has been addressed. The issue lies in the net: caif module, where a memory leak occurred in the cfusbl_device_notify function. Specifically, if caif_enroll_dev() fails, the allocated link_support pointer will not be assigned to the corresponding structure. Consequently, this memory will not be properly deallocated, leading to a memory leak. The vulnerability has been remedied, mitigating the risk of potential memory exhaustion or denial-of-service attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.