CVE-2021-47059: 
Linux Debian vulnerability analysis and mitigation

In the Linux kernel, a vulnerability (CVE-2021-47059) was identified and resolved in the crypto: sun8i-ss component. The issue involved a memory leak on an error path in the hash algorithm implementation (Kernel Git). This vulnerability was discovered and reported by the kernel test robot and Dan Carpenter (Red Hat CVE).

The vulnerability was caused by a memory leak in the error handling path of the sun8i-ss hash implementation. The issue stemmed from improper memory management where allocated memory wasn't being freed in all error conditions. The fix involved moving the kfree(result) call to ensure proper cleanup in all execution paths. The vulnerability has been assigned a CVSS v3 base score of 2.3, indicating a low severity level (Red Hat CVE).

The impact of this vulnerability is considered low. It could potentially lead to memory leaks in the Linux kernel when using the sun8i-ss cryptographic subsystem, specifically during hash operations that encounter errors (Red Hat CVE).

The vulnerability requires local access and high privileges to exploit. The attack complexity is rated as low, but the high privilege requirement significantly reduces the exploitability of this issue (Red Hat CVE).

The vulnerability has been fixed in the Linux kernel through a patch that properly handles memory cleanup in the error path. Red Hat Enterprise Linux 8 and 9 are not affected by this vulnerability (Red Hat CVE).