What’s Vulnerable › Vulnerabilities
CVE-2021-47104: IB/qib: Fix memory leak in qib_user_sdma_queue_pkts()
- Severity: medium (CVSS 5.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-03-04 · updated 2026-06-17
- Weakness: CWE-401
Description
In the Linux kernel, the following vulnerability has been resolved: IB/qib: Fix memory leak in qib_user_sdma_queue_pkts() The wrong goto label was used for the error case and missed cleanup of the pkt allocation. Addresses-Coverity-ID: 1493352 ("Resource leak")
Affected products
- Linux kernel: from 4.4.292 before 4.4.297; from 4.9.290 before 4.9.295; from 4.14.255 before 4.14.260; from 4.19.216 before 4.19.223; from 5.4.157 before 5.4.169; from 5.10.77 before 5.10.89 — fixed in 4.14.260, 4.19.223, 4.4.297, 4.9.295, 5.10.89, 5.15.12
How to fix
Upgrade to a fixed version: Linux kernel 4.14.260, 4.19.223, 4.4.297, 4.9.295. Check the vendor advisory for mitigations.
References
- https://git.kernel.org/stable/c/0aaec9c5f60754b56f84460ea439b8c5e91f4caa
- https://git.kernel.org/stable/c/1ced0a3015a95c6a6db45e37250912c4c86697ab
- https://git.kernel.org/stable/c/76b648063eb36c72dfc0a6896de8a0a7d2c7841c
- https://git.kernel.org/stable/c/79dcbd8176152b860028b62f81a635d987365752
- https://git.kernel.org/stable/c/7cf6466e00a77b0a914b7b2c28a1fc7947d55e59
- https://git.kernel.org/stable/c/aefcc25f3a0cd28a87d11d41d30419a12cd26a34
- https://git.kernel.org/stable/c/bee90911e0138c76ee67458ac0d58b38a3190f65
- https://git.kernel.org/stable/c/d53456492b5d02033c73dfa0f3b94c86337791ba
- https://git.kernel.org/stable/c/0aaec9c5f60754b56f84460ea439b8c5e91f4caa
- https://git.kernel.org/stable/c/1ced0a3015a95c6a6db45e37250912c4c86697ab
- https://git.kernel.org/stable/c/76b648063eb36c72dfc0a6896de8a0a7d2c7841c
- https://git.kernel.org/stable/c/79dcbd8176152b860028b62f81a635d987365752
Get alerted when CVE-2021-47104 or the next vulnerability affects your stack