In the Linux kernel, the following vulnerability has been resolved:
regmap: set debugfs_name to NULL after it is freed
There is a upstream commit cffa4b2122f5("regmap:debugfs: Fix a memory leak when calling regmap_attach_dev") that adds a if condition when create name for debugfs_name. With below function invoking logical, debugfs_name is freed in regmap_debugfs_exit(), but it is not created again because of the if condition introduced by above commit. regmap_reinit_cache() regmap_debugfs_exit() ... regmap_debugfs_init() So, set debugfs_name to NULL after it is freed.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-47058.json"
[
{
"events": [
{
"introduced": "4.19.168"
},
{
"fixed": "4.19.191"
}
]
},
{
"events": [
{
"introduced": "5.4.90"
},
{
"fixed": "5.4.119"
}
]
},
{
"events": [
{
"introduced": "5.10.8"
},
{
"fixed": "5.10.37"
}
]
},
{
"events": [
{
"introduced": "5.11"
},
{
"fixed": "5.11.21"
}
]
},
{
"events": [
{
"introduced": "5.12"
},
{
"fixed": "5.12.4"
}
]
}
]