In the Linux kernel, the following vulnerability has been resolved:
net: usb: fix memory leak in smsc75xx_bind
Syzbot reported memory leak in smsc75xx_bind(). The problem was is non-freed memory in case of errors after memory allocation.
backtrace: [<ffffffff84245b62>] kmalloc include/linux/slab.h:556 [inline] [<ffffffff84245b62>] kzalloc include/linux/slab.h:686 [inline] [<ffffffff84245b62>] smsc75xxbind+0x7a/0x334 drivers/net/usb/smsc75xx.c:1460 [<ffffffff82b5b2e6>] usbnetprobe+0x3b6/0xc30 drivers/net/usb/usbnet.c:1728
[
{
"events": [
{
"introduced": "2.6.34"
},
{
"fixed": "4.4.271"
}
]
},
{
"events": [
{
"introduced": "4.5"
},
{
"fixed": "4.9.271"
}
]
},
{
"events": [
{
"introduced": "4.10"
},
{
"fixed": "4.14.235"
}
]
},
{
"events": [
{
"introduced": "4.15"
},
{
"fixed": "4.19.193"
}
]
},
{
"events": [
{
"introduced": "4.20"
},
{
"fixed": "5.4.124"
}
]
},
{
"events": [
{
"introduced": "5.5"
},
{
"fixed": "5.10.42"
}
]
},
{
"events": [
{
"introduced": "5.11"
},
{
"fixed": "5.12.9"
}
]
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-47171.json"