CVE-2021-47499

iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove

MEDIUM

5.5

CVSS Score

Published: May 24, 2024 at 03:01 PM UTC

Updated: June 17, 2026 at 04:17 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.2%

SSVC

No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove When ACPI type is ACPI_SMO8500, the data->dready_trig will not be set, the memory allocated by iio_triggered_buffer_setup() will not be freed, and cause memory leak as follows: unreferenced object 0xffff888009551400 (size 512): comm "i2c-SMO8500-125", pid 911, jiffies 4294911787 (age 83.852s) hex dump (first 32 bytes): 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 20 e2 e5 c0 ff ff ff ff ........ ....... backtrace: [<0000000041ce75ee>] kmem_cache_alloc_trace+0x16d/0x360 [<000000000aeb17b0>] iio_kfifo_allocate+0x41/0x130 [kfifo_buf] [<000000004b40c1f5>] iio_triggered_buffer_setup_ext+0x2c/0x210 [industrialio_triggered_buffer] [<000000004375b15f>] kxcjk1013_probe+0x10c3/0x1d81 [kxcjk_1013] Fix it by remove data->dready_trig condition in probe and remove.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

4.10 ≤ v < 4.14.2584.15 ≤ v < 4.19.2214.2 ≤ v < 4.14.2584.2 ≤ v < 4.19.2214.2 ≤ v < 4.4.2954.2 ≤ v < 4.9.2934.2 ≤ v < 5.10.854.2 ≤ v < 5.15.84.2 ≤ v < 5.164.2 ≤ v < 5.4.1654.20 ≤ v < 5.4.1654.5 ≤ v < 4.9.2935.11 ≤ v < 5.15.85.5 ≤ v < 5.10.855.16 rc1 5.16 rc2 5.16 rc3 5.16 rc4a25691c1f9674090fb66586cf4c5d60d3efdf339

Vendor states this is fixed in 14508fe13b1c578b3d2ba574f1d48b351975860c (fixed)

Vendor states this is fixed in 3899700ddacbf7aaafadf44464fff3ff0d4e3307 (fixed)

Vendor states this is fixed in 60a55b9d91ba99eb8cf015bc46dc2de05e168a15 (fixed)

Vendor states this is fixed in 70c9774e180d151abaab358108e3510a8e615215 (fixed)

Vendor states this is fixed in 8c163a14277115ca962103910ab4cce55e862ffb (fixed)

Vendor states this is fixed in 8c1d43f3a3fc7184c42d7398bdf59a2a2903e4fc (fixed)

Vendor states this is fixed in a3730f74159ad00a28960c0efe2a931fe6fe6b45 (fixed)

Vendor states this is fixed in ee86d0bad80bdcd11a87e188a596727f41b62320 (fixed)

Vendor states this is fixed in 4.14.258 (unaffected)

Vendor states this is fixed in 4.19.221 (unaffected)

Vendor states this is fixed in 4.2 (unaffected)

Vendor states this is fixed in 4.4.295 (unaffected)