drm/amd/pm: fix a potential gpu_metrics_table memory leak (Linux Linux)

CVE-2021-4453
MEDIUM 5.5

At a glance

Source
NVD
EPSS
EPSS 0.27 % · percentile 20 ()
State
PUBLISHED
Published
Updated
Assigner
Linux
NVD status
Modified

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix a potential gpu_metrics_table memory leak Memory is allocated for gpu_metrics_table in renoir_init_smc_tables(), but not freed in int smu_v12_0_fini_smc_tables(). Free it!

Weaknesses (CWE)

  • CWE-401 — Missing Release of Memory after Effective Lifetime

References

Scores

VersionScoreVectorScored by
CVSS 3.1MEDIUM 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP
CVSS 3.1MEDIUM 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HNVD · nvd@nist.gov (Primary)
CVSS 3.1MEDIUM 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HNVD · 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

European references

CERT-FR advisories

Affected configurations (NVD CPE)

Affected products

ProductVersions
Linux · Linuxaffected 95868b85764aff2dcbf78d3054076df75446ad15 < 222cebd995cdf11fe0d502749560f65e64990e55 ; affected 95868b85764aff2dcbf78d3054076df75446ad15 < 257b3bb16634fd936129fe2f57a91594a75b8751 ; affected 95868b85764aff2dcbf78d3054076df75446ad15 < aa464957f7e660abd554f2546a588f6533720e21
Linux · Linuxaffected 5.10 ; unaffected 0 < 5.10 ; unaffected 5.10.88 ≤ 5.10.* ; unaffected 5.15.11 ≤ 5.15.* ; unaffected 5.16 ≤ *

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD