What’s Vulnerable › Vulnerabilities

CVE-2021-47177: iommu/vt-d: Fix sysfs leak in alloc_iommu()

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-03-25 · updated 2026-06-17
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix sysfs leak in alloc_iommu() iommu_device_sysfs_add() is called before, so is has to be cleaned on subsequent errors.

Affected products

• Linux kernel: from 4.11 before 4.14.235; from 4.15 before 4.19.193; from 4.20 before 5.4.124; from 5.5 before 5.10.42; from 5.11 before 5.12.9; 5.13-rc1, 5.13-rc2, 5.13-rc3 — fixed in 4.14.235, 4.19.193, 5.10.42, 5.12.9, 5.4.124

How to fix

Upgrade to a fixed version: Linux kernel 4.14.235, 4.19.193, 5.10.42, 5.12.9. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/044bbe8b92ab4e542de7f6c93c88ea65cccd8e29
• https://git.kernel.org/stable/c/0ee74d5a48635c848c20f152d0d488bf84641304
• https://git.kernel.org/stable/c/22da9f4978381a99f1abaeaf6c9b83be6ab5ddd8
• https://git.kernel.org/stable/c/2ec5e9bb6b0560c90d315559c28a99723c80b996
• https://git.kernel.org/stable/c/ca466561eef36d1ec657673e3944eb6340bddb5b
• https://git.kernel.org/stable/c/f01134321d04f47c718bb41b799bcdeda27873d2
• https://git.kernel.org/stable/c/044bbe8b92ab4e542de7f6c93c88ea65cccd8e29
• https://git.kernel.org/stable/c/0ee74d5a48635c848c20f152d0d488bf84641304
• https://git.kernel.org/stable/c/22da9f4978381a99f1abaeaf6c9b83be6ab5ddd8
• https://git.kernel.org/stable/c/2ec5e9bb6b0560c90d315559c28a99723c80b996
• https://git.kernel.org/stable/c/ca466561eef36d1ec657673e3944eb6340bddb5b
• https://git.kernel.org/stable/c/f01134321d04f47c718bb41b799bcdeda27873d2

Get alerted when CVE-2021-47177 or the next vulnerability affects your stack