NetSight
IP …
medium5.5

CVE-2021-47305

In the Linux kernel, the following vulnerability has been resolved: dma-buf/sync_file: Don't leak fences on merge failure Each add_fence() call does a dma_fenc…

Impact

In the Linux kernel, the following vulnerability has been resolved: dma-buf/sync_file: Don't leak fences on merge failure Each add_fence() call does a dma_fence_get() on the relevant fence. In the error path, we weren't calling dma_fence_put() so all those fences got leaked. Also, in the krealloc_array failure case, we weren't freeing the fences array. Instead, ensure that i and fences are always zero-initialized and dma_fence_put() all the fences and kfree(fences) on every error path.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.9 before 4.14.241
from 4.15 before 4.19.199
from 4.20 before 5.4.135
from 5.5 before 5.10.53
from 5.11 before 5.13.5
Version 5.14

Weakness classification

CWE-617

References