CVE-2021-47104
IB/qib: Fix memory leak in qib_user_sdma_queue_pkts()
MEDIUM
5.5
CVSS Score
Published: March 4, 2024 at 06:15 PM UTC
Updated: June 17, 2026 at 04:16 AM UTC
1 product affected across 1 vendorLinux Kernel
Using Linux by Linux?
Get instant alerts when new vulnerabilities affect Linux - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.2%
SSVC
No known exploit
Description
In the Linux kernel, the following vulnerability has been resolved: IB/qib: Fix memory leak in qib_user_sdma_queue_pkts() The wrong goto label was used for the error case and missed cleanup of the pkt allocation. Addresses-Coverity-ID: 1493352 ("Resource leak")
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v ≥ 5.14.164.14.255 ≤ v < 4.14.2604.19.216 ≤ v < 4.19.2234.4.292 ≤ v < 4.4.2974.9.290 ≤ v < 4.9.2955.10.77 ≤ v < 5.10.895.14.16 ≤ v < 5.155.15 ≤ v < 5.15.125.15 ≤ v < 5.165.4.157 ≤ v < 5.4.1690d4395477741608d123dad51def9fe50b7ebe9520f8cdfff06829a0b0348b6debc29ff6a619677243f57c3f67fd93b4da86aeffea1ca32c484d054ad4.14.2554.19.2164.4.2924.9.2905.10.775.14.165.16 rc15.16 rc25.16 rc35.16 rc45.16 rc55.16 rc65.4.15760833707b968d5ae02a75edb7886dcd4a957cf0d73d2892148aa4397a885b4f4afcfc5b27a325c42bda41654b6e0c125a624ca35d6d20beb8015b5d0c3e17e58f571f34c51aeb17274ed02c2ed5cf780d39bf40e55e666b5905fdbd46a0dced030ce87be
Vendor states this is fixed in 0aaec9c5f60754b56f84460ea439b8c5e91f4caa (fixed)
Vendor states this is fixed in 1ced0a3015a95c6a6db45e37250912c4c86697ab (fixed)
Vendor states this is fixed in 76b648063eb36c72dfc0a6896de8a0a7d2c7841c (fixed)
Vendor states this is fixed in 79dcbd8176152b860028b62f81a635d987365752 (fixed)
Vendor states this is fixed in 7cf6466e00a77b0a914b7b2c28a1fc7947d55e59 (fixed)
Vendor states this is fixed in aefcc25f3a0cd28a87d11d41d30419a12cd26a34 (fixed)
Vendor states this is fixed in bee90911e0138c76ee67458ac0d58b38a3190f65 (fixed)
Vendor states this is fixed in d53456492b5d02033c73dfa0f3b94c86337791ba (fixed)
Vendor states this is fixed in 4.14.260 (unaffected)
Vendor states this is fixed in 4.19.223 (unaffected)
Vendor states this is fixed in 4.4.297 (unaffected)
Vendor states this is fixed in 4.9.295 (unaffected)
Vendor states this is fixed in 5.10.89 (unaffected)
Vendor states this is fixed in 5.15 (unaffected)
Vendor states this is fixed in 5.15.12 (unaffected)
Vendor states this is fixed in 5.16 (unaffected)
Vendor states this is fixed in 5.4.169 (unaffected)
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
- https://git.kernel.org/stable/c/0aaec9c5f60754b56f84460ea439b8c5e91f4caa
- https://git.kernel.org/stable/c/1ced0a3015a95c6a6db45e37250912c4c86697ab
- https://git.kernel.org/stable/c/76b648063eb36c72dfc0a6896de8a0a7d2c7841c
- https://git.kernel.org/stable/c/79dcbd8176152b860028b62f81a635d987365752
- https://git.kernel.org/stable/c/7cf6466e00a77b0a914b7b2c28a1fc7947d55e59
References (8)
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/0aaec9c5f60754b56f84460ea439b8c5e91f4caaPatch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/1ced0a3015a95c6a6db45e37250912c4c86697abPatch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/76b648063eb36c72dfc0a6896de8a0a7d2c7841cPatch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/79dcbd8176152b860028b62f81a635d987365752Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/7cf6466e00a77b0a914b7b2c28a1fc7947d55e59Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/aefcc25f3a0cd28a87d11d41d30419a12cd26a34Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/bee90911e0138c76ee67458ac0d58b38a3190f65Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/d53456492b5d02033c73dfa0f3b94c86337791baSSVC — Action Prioritization
SSVCNo known exploitNot automatablePartial impact
SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.
CVSS
- Attack Vector
- LOCAL
- Complexity
- LOW
- Privileges
- LOW
- User Interaction
- NONE
- Scope
- UNCHANGED
- Confidentiality
- NONE
- Integrity
- NONE
- Availability
- HIGH
Vector?
Quick Info
StatusANALYZED
CWE
CWE-401
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card