NetSight
medium5.5

CVE-2021-47425

In the Linux kernel, the following vulnerability has been resolved: i2c: acpi: fix resource leak in reconfiguration device addition acpi_i2c_find_adapter_by_ha…

Impact

In the Linux kernel, the following vulnerability has been resolved: i2c: acpi: fix resource leak in reconfiguration device addition acpi_i2c_find_adapter_by_handle() calls bus_find_device() which takes a reference on the adapter which is never released which will result in a reference count leak and render the adapter unremovable. Make sure to put the adapter after creating the client in the same manner that we do for OF. [wsa: fixed title]

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.8 before 4.14.251
from 4.15 before 4.19.211
from 4.20 before 5.4.153
from 5.5 before 5.10.73
from 5.11 before 5.14.12
Version 5.15

Weakness classification

References