CVE-2021-47455 - CVE House
Back to Database
Status published Medium CVE-2021-47455

ptp: Fix possible memory leak in ptp_clock_register()

Vulnerability Description

In the Linux kernel, the following vulnerability has been resolved: ptp: Fix possible memory leak in ptp_clock_register() I got memory leak as follows when doing fault injection test: unreferenced object 0xffff88800906c618 (size 8): comm "i2c-idt82p33931", pid 4421, jiffies 4294948083 (age 13.188s) hex dump (first 8 bytes): 70 74 70 30 00 00 00 00 ptp0.... backtrace: [<00000000312ed458>] __kmalloc_track_caller+0x19f/0x3a0 [<0000000079f6e2ff>] kvasprintf+0xb5/0x150 [<0000000026aae54f>] kvasprintf_const+0x60/0x190 [<00000000f323a5f7>] kobject_set_name_vargs+0x56/0x150 [<000000004e35abdd>] dev_set_name+0xc0/0x100 [<00000000f20cfe25>] ptp_clock_register+0x9f4/0xd30 [ptp] [<000000008bb9f0de>] idt82p33_probe.cold+0x8b6/0x1561 [ptp_idt82p33] When posix_clock_register() returns an error, the name allocated in dev_set_name() will be leaked, the put_device() should be used to give up the device reference, then the name will be freed in kobject_cleanup() and other memory will be freed in ptp_clock_release().

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-47455

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Affected Software

Linux
Vulnerable Versions:
a33121e5487b424339636b25c35d3a180eaa5f5e, 5230ef61882d2d14deb846eb6b48370694816e4c, 6f5e3bb7879ee1eb71c6c3cbaaffbb0da6cd7d57, 89e8fc989feaac00bf1a7f9a766289422e2f5768, 2dece4d6d13fe179ee3a5991811712725a56e2f7, 0393b8720128d5b39db8523e5bfbfc689f18c37c, bfa2e0cd3dfda64fde43c3dca3aeba298d2fe7ad, 3.16.83, 4.4.224, 4.9.224, 4.14.162, 4.19.93, 5.4.8, 5.5, 0, 5.10.241, 5.14.15, 5.15

Timeline

Official Publish: May 22nd, 2024
Last Modified: May 23rd, 2026
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.