CVE-2021-46924
Published: Feb 27, 2024
Modified: May 11, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: NFC: st21nfca: Fix memory leak in device probe and remove 'phy->pending_skb' is alloced when device probe, but forgot to free in the error handling path and remove path, this cause memory leak as follows: unreferenced object 0xffff88800bc06800 (size 512): comm "8", pid 11775, jiffies 4295159829 (age 9.032s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<00000000d66c09ce>] __kmalloc_node_track_caller+0x1ed/0x450 [<00000000c93382b3>] kmalloc_reserve+0x37/0xd0 [<000000005fea522c>] __alloc_skb+0x124/0x380 [<0000000019f29f9a>] st21nfca_hci_i2c_probe+0x170/0x8f2 Fix it by freeing 'pending_skb' in error and remove.
| Vendor | Product | Versions |
|---|---|---|
Linux | Linux | affected 68957303f44a501af5cf37913208a2acaa6bcdf1 - < 38c3e320e7ff46f2dc67bc5045333e63d9f8918daffected 68957303f44a501af5cf37913208a2acaa6bcdf1 - < a1e0080a35a16ce3808f7040fe0c3a8fdb052349affected 68957303f44a501af5cf37913208a2acaa6bcdf1 - < 1cd4063dbc91cf7965d73a6a3855e2028cd4613baffected 68957303f44a501af5cf37913208a2acaa6bcdf1 - < e553265ea56482da5700f56319fda9ff53e7dcb4affected 68957303f44a501af5cf37913208a2acaa6bcdf1 - < 238920381b8925d070d32d73cd9ce52ab29896fe+1 more versions |
Linux | Linux | affected 3.16unaffected 0 - < 3.16unaffected 4.14.261 - <= 4.14.*unaffected 4.19.224 - <= 4.19.*unaffected 5.4.170 - <= 5.4.*+3 more versions |
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now