CVE-2021-46985
ACPI: scan: Fix a memory leak in an error handling path
MEDIUM
5.5
CVSS Score
Published: February 28, 2024 at 08:13 AM UTC
Updated: June 17, 2026 at 04:16 AM UTC
1 product affected across 1 vendorLinux Kernel
Using Linux by Linux?
Get instant alerts when new vulnerabilities affect Linux - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.2%
SSVC
No known exploit
Description
In the Linux kernel, the following vulnerability has been resolved: ACPI: scan: Fix a memory leak in an error handling path If 'acpi_device_set_name()' fails, we must free 'acpi_device_bus_id->bus_id' or there is a (potential) memory leak.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
4.14.228 ≤ v < 4.14.2334.19.184 ≤ v < 4.19.1914.9.264 ≤ v < 4.9.2695.10.27 ≤ v < 5.10.385.11.11 ≤ v < 5.11.225.12 ≤ v < 5.12.55.12 ≤ v < 5.135.4.109 ≤ v < 5.4.120321dbe6c0b551f9f8030becc6900f77cf9bbb9ad4.14.2284.19.1844.9.2644a5891992c680d69d7e490e4d0428d17779d8e855.10.275.11.115.13 rc15.4.109717d9d88fbd956ab03fad97266f6ce63a036e7f87385e438e1f31af5b86f72fd19b0dcd2738502c9bc0b1a2036dd8072106ec81a8685ecb901f72ed6e5cdbe419004e172f642e876a671a9ff1c52f8bbeb50aaf960e3bedfef79063411ffd670da94b84b
Vendor states this is fixed in 0c8bd174f0fc131bc9dfab35cd8784f59045da87 (fixed)
Vendor states this is fixed in 5ab9857dde7c3ea3faef6b128d718cf8ba98721b (fixed)
Vendor states this is fixed in 6901a4f795e0e8d65ae779cb37fc22e0bf294712 (fixed)
Vendor states this is fixed in 69cc821e89ce572884548ac54c4f80eec7a837a5 (fixed)
Vendor states this is fixed in a7e17a8d421ae23c920240625b4413c7b94d94a4 (fixed)
Vendor states this is fixed in c5c8f6ffc942cf42f990f22e35bcf4cbe9d8c2fb (fixed)
Vendor states this is fixed in dafd4c0b5e835db020cff11c74b4af9493a58e72 (fixed)
Vendor states this is fixed in e2381174daeae0ca35eddffef02dcc8de8c1ef8a (fixed)
Vendor states this is fixed in 4.14.233 (unaffected)
Vendor states this is fixed in 4.19.191 (unaffected)
Vendor states this is fixed in 4.9.269 (unaffected)
Vendor states this is fixed in 5.10.38 (unaffected)
Vendor states this is fixed in 5.11.22 (unaffected)
Vendor states this is fixed in 5.12 (unaffected)
Vendor states this is fixed in 5.12.5 (unaffected)
Vendor states this is fixed in 5.13 (unaffected)
Vendor states this is fixed in 5.4.120 (unaffected)
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
- https://git.kernel.org/stable/c/0c8bd174f0fc131bc9dfab35cd8784f59045da87
- https://git.kernel.org/stable/c/5ab9857dde7c3ea3faef6b128d718cf8ba98721b
- https://git.kernel.org/stable/c/6901a4f795e0e8d65ae779cb37fc22e0bf294712
- https://git.kernel.org/stable/c/69cc821e89ce572884548ac54c4f80eec7a837a5
- https://git.kernel.org/stable/c/a7e17a8d421ae23c920240625b4413c7b94d94a4
References (8)
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/0c8bd174f0fc131bc9dfab35cd8784f59045da87Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/5ab9857dde7c3ea3faef6b128d718cf8ba98721bPatch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/6901a4f795e0e8d65ae779cb37fc22e0bf294712Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/69cc821e89ce572884548ac54c4f80eec7a837a5Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/a7e17a8d421ae23c920240625b4413c7b94d94a4Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/c5c8f6ffc942cf42f990f22e35bcf4cbe9d8c2fbPatch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/dafd4c0b5e835db020cff11c74b4af9493a58e72Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/e2381174daeae0ca35eddffef02dcc8de8c1ef8aSSVC — Action Prioritization
SSVCNo known exploitNot automatablePartial impact
SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.
CVSS
- Attack Vector
- LOCAL
- Complexity
- LOW
- Privileges
- LOW
- User Interaction
- NONE
- Scope
- UNCHANGED
- Confidentiality
- NONE
- Integrity
- NONE
- Availability
- HIGH
Vector?
Quick Info
StatusANALYZED
CWE
CWE-401
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card