
Cloud Vulnerability DB
A community-led vulnerabilities database
CVE-2021-47070 affects the Linux kernel's uiohvgeneric driver, where a memory leak vulnerability was discovered in the error handling paths. The issue was identified in the probe function where memory allocated by 'vmbusallocring()' was not properly freed in error conditions (Ubuntu Security).
The vulnerability stems from a missing vmbusfreering() call in the error handling path of the uiohvgeneric driver's probe function. While the memory was properly freed in the remove function, it leaked during error conditions in the probe path. The fix involved adding the missing vmbusfreering() call in the appropriate error handling section (Kernel Commit).
The vulnerability could lead to memory leaks in the Linux kernel when errors occur during the probe function of the uiohvgeneric driver. This could potentially result in system resource depletion over time (Ubuntu Security).
The issue has been fixed in various Linux kernel versions. Ubuntu has released patches for affected versions: Ubuntu 20.04 LTS (Focal) received the fix in version 5.4.0-186.206, and Ubuntu 18.04 LTS (Bionic) received the fix in version 5.4.0-186.206~18.04.1. Users should update their systems to the patched versions (Ubuntu Security).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."