Log in Start free

Vulnerability · Published Feb 28, 2024 · Assigned by Linux

CVE-2021-46985ACPI: scan: Fix a memory leak in an error handling path

Medium 5.5

In plain English

A medium-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 16% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)5.5Medium
Exploit odds (30 days)0.2%top 83.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: ACPI: scan: Fix a memory leak in an error handling path If 'acpi_device_set_name()' fails, we must free 'acpi_device_bus_id->bus_id' or there is a (potential) memory leak.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux5.10.38-1DEBIAN-CVE-2021-46985
Debian:13linux5.10.38-1DEBIAN-CVE-2021-46985
Debian:14linux5.10.38-1DEBIAN-CVE-2021-46985
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2021-46985
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2021-46985
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2021-46985
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2021-46985
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2021-46985
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2021-46985
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2021-46985
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2021-46985
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2021-46985
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2021-46985
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2021-46985
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2021-46985
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2021-46985
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2021-46985
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2021-46985
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2021-46985
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2021-46985
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2021-46985
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2021-46985
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2021-46985
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2021-46985
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2021-46985
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2021-46985
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2021-46985

Affected products (as reported)

VendorProductVersions
Linux Linux e5cdbe419004e172f642e876a671a9ff1c52f8bb – before 6901a4f795e0e8d65ae779cb37fc22e0bf294712717d9d88fbd956ab03fad97266f6ce63a036e7f8 – before 5ab9857dde7c3ea3faef6b128d718cf8ba98721b7385e438e1f31af5b86f72fd19b0dcd2738502c9 – before 69cc821e89ce572884548ac54c4f80eec7a837a5bc0b1a2036dd8072106ec81a8685ecb901f72ed6 – before dafd4c0b5e835db020cff11c74b4af9493a58e724a5891992c680d69d7e490e4d0428d17779d8e85 – before e2381174daeae0ca35eddffef02dcc8de8c1ef8a321dbe6c0b551f9f8030becc6900f77cf9bbb9ad – before c5c8f6ffc942cf42f990f22e35bcf4cbe9d8c2fbeb50aaf960e3bedfef79063411ffd670da94b84b – before a7e17a8d421ae23c920240625b4413c7b94d94a4eb50aaf960e3bedfef79063411ffd670da94b84b – before 0c8bd174f0fc131bc9dfab35cd8784f59045da87
Linux Linux 5.12

References