What’s Vulnerable › Vulnerabilities

CVE-2021-47071: uio_hv_generic: Fix a memory leak in error handling paths

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-03-01 · updated 2026-06-17
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: uio_hv_generic: Fix a memory leak in error handling paths If 'vmbus_establish_gpadl()' fails, the (recv|send)_gpadl will not be updated and 'hv_uio_cleanup()' in the error handling path will not be able to free the corresponding buffer. In such a case, we need to free the buffer explicitly.

Affected products

• Linux kernel: from 4.20 before 5.4.122; from 5.5 before 5.10.40; from 5.11 before 5.12.7; 5.13-rc1, 5.13-rc2 — fixed in 5.10.40, 5.12.7, 5.4.122

How to fix

Upgrade to a fixed version: Linux kernel 5.10.40, 5.12.7, 5.4.122. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/3ee098f96b8b6c1a98f7f97915f8873164e6af9d
• https://git.kernel.org/stable/c/53486c467e356e06aa37047c984fccd64d78c827
• https://git.kernel.org/stable/c/cdd91637d4ef33e2be19a8e16e72e7d00c996d76
• https://git.kernel.org/stable/c/d84b5e912212b05f6b5bde9f682046accfbe0354
• https://git.kernel.org/stable/c/3ee098f96b8b6c1a98f7f97915f8873164e6af9d
• https://git.kernel.org/stable/c/53486c467e356e06aa37047c984fccd64d78c827
• https://git.kernel.org/stable/c/cdd91637d4ef33e2be19a8e16e72e7d00c996d76
• https://git.kernel.org/stable/c/d84b5e912212b05f6b5bde9f682046accfbe0354

Get alerted when CVE-2021-47071 or the next vulnerability affects your stack