What’s Vulnerable › Vulnerabilities

CVE-2021-47313: cpufreq: CPPC: Fix potential memleak in cppc_cpufreq_cpu_init

• Severity: high (CVSS 8.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-05-21 · updated 2026-06-17
• Weakness: CWE-400

Description

In the Linux kernel, the following vulnerability has been resolved: cpufreq: CPPC: Fix potential memleak in cppc_cpufreq_cpu_init It's a classic example of memleak, we allocate something, we fail and never free the resources. Make sure we free all resources on policy ->init() failures.

Affected products

• Linux kernel: from 5.11 before 5.12.19; from 5.13 before 5.13.4 — fixed in 5.12.19, 5.13.4

How to fix

Upgrade to a fixed version: Linux kernel 5.12.19, 5.13.4. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/b775383355755885b19d2acef977f1ca132e80a3
• https://git.kernel.org/stable/c/e1b2b2b61d30d7ce057ec17237c217d152ed97f2
• https://git.kernel.org/stable/c/fe2535a44904a77615a3af8e8fd7dafb98fb0e1b
• https://git.kernel.org/stable/c/b775383355755885b19d2acef977f1ca132e80a3
• https://git.kernel.org/stable/c/e1b2b2b61d30d7ce057ec17237c217d152ed97f2
• https://git.kernel.org/stable/c/fe2535a44904a77615a3af8e8fd7dafb98fb0e1b

Get alerted when CVE-2021-47313 or the next vulnerability affects your stack