CVE-2021-47043: 
Linux Kernel vulnerability analysis and mitigation

CVE-2021-47043 affects the Linux kernel and involves a resource leak vulnerability in the venus_probe() function of the media subsystem. The vulnerability was discovered in Linux kernel versions from 5.5 through 5.12.4. The issue occurs when an error happens after a successful 'of_icc_get()' call, where the resources are not properly cleaned up (NVD).

The vulnerability stems from improper resource management in the venus_probe() function within the Linux kernel's media subsystem. Specifically, when an error occurs after a successful 'of_icc_get()' call, the resources are not properly released. The fix involves replacing 'of_icc_get()' with 'devm_of_icc_get()' to prevent the leak and updating the remove function to remove now-unneeded 'icc_put()' calls (Kernel Patch). The vulnerability has been assigned a CVSS v3.1 base score of 5.5 MEDIUM (NVD).

The vulnerability could lead to resource leaks in the Linux kernel's media subsystem, potentially affecting system stability and resource management. The issue specifically impacts the memory management related to the Venus hardware codec driver (NVD).

The vulnerability requires local access and low privileges to exploit. It has a low attack complexity, requiring no user interaction to exploit (NVD).

The vulnerability has been patched in the Linux kernel. The fix involves using 'devm_of_icc_get()' instead of 'of_icc_get()' to properly manage resources and prevent leaks. Users should update to patched kernel versions that include the fix (Kernel Patch).