net: fec: fix the potential memory leak in fec_enet_init() (Linux Linux)
En bref
- Source
- NVD
- EPSS
- EPSS 0.22 % · centile 13 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- Linux
- Statut NVD
- Analyzed
Description
In the Linux kernel, the following vulnerability has been resolved: net: fec: fix the potential memory leak in fec_enet_init() If the memory allocated for cbd_base is failed, it should free the memory allocated for the queues, otherwise it causes memory leak. And if the memory allocated for the queues is failed, it can return error directly.
Faiblesses (CWE)
- CWE-401 — Mémoire non libérée après sa durée de vie utile
Références
- https://git.kernel.org/stable/c/15102886bc8f5f29daaadf2d925591d564c17e9f
- https://git.kernel.org/stable/c/20255d41ac560397b6a07d8d87dcc5e2efc7672a
- https://git.kernel.org/stable/c/8ee7ef4a57a9e1228b6f345aaa70aa8951c7e9cd
- https://git.kernel.org/stable/c/32a1777fd113335c3f70dc445dffee0ad1c6870f
- https://git.kernel.org/stable/c/619fee9eb13b5d29e4267cb394645608088c28a8
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
Références européennes
- ENISA EUVD · EUVD-2021-33798
- GCVE · GCVE-0-2021-47150
Avis du CERT-FR
- CERTFR-2025-AVI-0387 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0458 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0440 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0420 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0363 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Configurations affectées (CPE NVD)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 3.18 < 4.19.193cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 4.20 < 5.4.124cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.5 < 5.10.42cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.11 < 5.12.9cpe:2.3:o:linux:linux_kernel:5.13:rc1:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:5.13:rc2:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:5.13:rc3:*:*:*:*:*:*
Produits affectés
| Produit | Versions |
|---|---|
| Linux · Linux | affected 59d0f746564495c7f54526674deabfcf101236a1 < 15102886bc8f5f29daaadf2d925591d564c17e9f ; affected 59d0f746564495c7f54526674deabfcf101236a1 < 20255d41ac560397b6a07d8d87dcc5e2efc7672a ; affected 59d0f746564495c7f54526674deabfcf101236a1 < 8ee7ef4a57a9e1228b6f345aaa70aa8951c7e9cd ; affected 59d0f746564495c7f54526674deabfcf101236a1 < 32a1777fd113335c3f70dc445dffee0ad1c6870f ; affected 59d0f746564495c7f54526674deabfcf101236a1 < 619fee9eb13b5d29e4267cb394645608088c28a8 |
| Linux · Linux | affected 3.18 ; unaffected 0 < 3.18 ; unaffected 4.19.193 ≤ 4.19.* ; unaffected 5.4.124 ≤ 5.4.* ; unaffected 5.10.42 ≤ 5.10.* ; unaffected 5.12.9 ≤ 5.12.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |