[SRU][F][PATCH 0/2] CVE-2021-47070

Bethany Jamison bethany.jamison at canonical.com
Mon Apr 1 23:12:06 UTC 2024


[Impact]

 In the Linux kernel, the following vulnerability has been resolved:

 uio_hv_generic: Fix another memory leak in error handling paths

 Memory allocated by 'vmbus_alloc_ring()' at the beginning of the probe
 function is never freed in the error handling path.

 Add the missing 'vmbus_free_ring()' call.

 Note that it is already freed in the .remove function.

[Fix]

Mantic:	not-affected
Jammy:	not-affected
Focal:	Fix and prereq commits were cleanly cherry-picked.
Bionic:	not-affected
Xenial:	not-affected
Trusty: not-affected

[Test Case]

Compile and boot tested.

[Where problems could occur]

This fix affects those who use the hyper-v UIO driver, issues with the
fix would be visible with loss of memory resources including slower
performance and potentially a future system crash.

Alexandru Ardelean (1):
  uio: uio_hv_generic: use devm_kzalloc() for private data alloc

Christophe JAILLET (1):
  uio_hv_generic: Fix another memory leak in error handling paths

 drivers/uio/uio_hv_generic.c | 12 +++++-------
 1 file changed, 5 insertions(+), 7 deletions(-)

-- 
2.34.1




More information about the kernel-team mailing list