NetSight
IP …
medium5.5

CVE-2021-47651

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: rpmpd: Check for null return of devm_kcalloc Because of the possible failure of …

Impact

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: rpmpd: Check for null return of devm_kcalloc Because of the possible failure of the allocation, data->domains might be NULL pointer and will cause the dereference of the NULL pointer later. Therefore, it might be better to check it and directly return -ENOMEM without releasing data manually if fails, because the comment of the devm_kmalloc() says "Memory allocated with this function is automatically freed on driver detach.".

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.1 before 5.4.189
from 5.5 before 5.10.110
from 5.11 before 5.15.33
from 5.16 before 5.16.19
from 5.17 before 5.17.2

Weakness classification

CWE-476

References