What’s Vulnerable › Vulnerabilities

CVE-2021-47043: media: venus: core: Fix some resource leaks in the error path of 'venus_probe()'

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-02-28 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: media: venus: core: Fix some resource leaks in the error path of 'venus_probe()' If an error occurs after a successful 'of_icc_get()' call, it must be undone. Use 'devm_of_icc_get()' instead of 'of_icc_get()' to avoid the leak. Update the remove function accordingly and axe the now unneeded 'icc_put()' calls.

Affected products

• Linux kernel: from 5.5 before 5.10.37; from 5.11 before 5.11.21; from 5.12 before 5.12.4 — fixed in 5.10.37, 5.11.21, 5.12.4

How to fix

Upgrade to a fixed version: Linux kernel 5.10.37, 5.11.21, 5.12.4. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/00b68a7478343afdf83f30c43e64db5296057030
• https://git.kernel.org/stable/c/5a465c5391a856a0c1e9554964d660676c35d1b2
• https://git.kernel.org/stable/c/711acdf0228dc71601247f28b56f13e850e395c8
• https://git.kernel.org/stable/c/940d01eceb3a7866fbfca136a55a5625fc75a565
• https://git.kernel.org/stable/c/00b68a7478343afdf83f30c43e64db5296057030
• https://git.kernel.org/stable/c/5a465c5391a856a0c1e9554964d660676c35d1b2
• https://git.kernel.org/stable/c/711acdf0228dc71601247f28b56f13e850e395c8
• https://git.kernel.org/stable/c/940d01eceb3a7866fbfca136a55a5625fc75a565

Get alerted when CVE-2021-47043 or the next vulnerability affects your stack