What’s Vulnerable › Vulnerabilities

CVE-2021-47070: uio_hv_generic: Fix another memory leak in error handling paths

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-03-01 · updated 2026-06-17
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: uio_hv_generic: Fix another memory leak in error handling paths Memory allocated by 'vmbus_alloc_ring()' at the beginning of the probe function is never freed in the error handling path. Add the missing 'vmbus_free_ring()' call. Note that it is already freed in the .remove function.

Affected products

• Linux kernel: from 4.20 before 5.12.7; 5.13-rc1, 5.13-rc2 — fixed in 5.12.7

How to fix

Upgrade to a fixed version: Linux kernel 5.12.7. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0b0226be3a52dadd965644bc52a807961c2c26df
• https://git.kernel.org/stable/c/261bbd90cc53d2835343f056770156cf1e82cf03
• https://git.kernel.org/stable/c/5f59240cf25b2f7a0fdffc2701482a70310fec07
• https://git.kernel.org/stable/c/0b0226be3a52dadd965644bc52a807961c2c26df
• https://git.kernel.org/stable/c/5f59240cf25b2f7a0fdffc2701482a70310fec07
• https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html

Get alerted when CVE-2021-47070 or the next vulnerability affects your stack