Log in Start free

Vulnerability · Published Feb 26, 2025 · Assigned by Linux

CVE-2021-47651soc: qcom: rpmpd: Check for null return of devm_kcalloc

Medium 5.5

In plain English

A medium-severity null pointer dereference in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 16% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.5Medium
Exploit odds (30 days)0.2%top 83.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: rpmpd: Check for null return of devm_kcalloc Because of the possible failure of the allocation, data->domains might be NULL pointer and will cause the dereference of the NULL pointer later. Therefore, it might be better to check it and directly return -ENOMEM without releasing data manually if fails, because the comment of the devm_kmalloc() says "Memory allocated with this function is automatically freed on driver detach.".

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux5.17.3-1DEBIAN-CVE-2021-47651
Debian:13linux5.17.3-1DEBIAN-CVE-2021-47651
Debian:14linux5.17.3-1DEBIAN-CVE-2021-47651
Ubuntu:22.04:LTSlinux5.15.0-37.39UBUNTU-CVE-2021-47651
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2021-47651
Ubuntu:22.04:LTSlinux-aws5.15.0-1011.14UBUNTU-CVE-2021-47651
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2021-47651
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2021-47651
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2021-47651
Ubuntu:22.04:LTSlinux-azure5.15.0-1010.12UBUNTU-CVE-2021-47651
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2021-47651
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2021-47651
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2021-47651
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2021-47651
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2021-47651
Ubuntu:22.04:LTSlinux-gcp5.15.0-1008.12UBUNTU-CVE-2021-47651
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2021-47651
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2021-47651
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2021-47651
Ubuntu:22.04:LTSlinux-gke5.15.0-1008.10UBUNTU-CVE-2021-47651
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2021-47651
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2021-47651
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2021-47651
Ubuntu:22.04:LTSlinux-ibm5.15.0-1007.8UBUNTU-CVE-2021-47651
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2021-47651
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1008.11UBUNTU-CVE-2021-47651
Ubuntu:22.04:LTSlinux-kvm5.15.0-1010.11UBUNTU-CVE-2021-47651
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-37.39UBUNTU-CVE-2021-47651
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2021-47651
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2021-47651
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2021-47651
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2021-47651
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2021-47651
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2021-47651
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2021-47651
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2021-47651
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2021-47651
Ubuntu:22.04:LTSlinux-oracle5.15.0-1009.12UBUNTU-CVE-2021-47651
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2021-47651
Ubuntu:22.04:LTSlinux-raspi5.15.0-1011.13UBUNTU-CVE-2021-47651
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2021-47651
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2021-47651
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2021-47651
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2021-47651
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2021-47651
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2021-47651
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2021-47651
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2021-47651

Affected products (as reported)

VendorProductVersions
Linux Linux bbe3a66c3f5a65fb3d702351bac2a6033944d389 – before 755dbc3d73789ac9f0017c729abf5e4b153bf799bbe3a66c3f5a65fb3d702351bac2a6033944d389 – before b5d6eba71997b6d661935d2b15094ac7f9f6132dbbe3a66c3f5a65fb3d702351bac2a6033944d389 – before 724376c30af5a57686b223dbcd6188e07d2a1de2bbe3a66c3f5a65fb3d702351bac2a6033944d389 – before 84b89fa877ad576e9ee8130f412cfd592f274508bbe3a66c3f5a65fb3d702351bac2a6033944d389 – before 31b5124d742969ea8bf7a1360596f548ca23e770bbe3a66c3f5a65fb3d702351bac2a6033944d389 – before 5a811126d38f9767a20cc271b34db7c8efc5a46c
Linux Linux 5.1

Weakness: CWE-476 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References