CVE-2021-47070
Linux Kernel vulnerability analysis and mitigation

Overview

CVE-2021-47070 affects the Linux kernel's uiohvgeneric driver, where a memory leak vulnerability was discovered in the error handling paths. The issue was identified in the probe function where memory allocated by 'vmbusallocring()' was not properly freed in error conditions (Ubuntu Security).

Technical details

The vulnerability stems from a missing vmbusfreering() call in the error handling path of the uiohvgeneric driver's probe function. While the memory was properly freed in the remove function, it leaked during error conditions in the probe path. The fix involved adding the missing vmbusfreering() call in the appropriate error handling section (Kernel Commit).

Impact

The vulnerability could lead to memory leaks in the Linux kernel when errors occur during the probe function of the uiohvgeneric driver. This could potentially result in system resource depletion over time (Ubuntu Security).

Mitigation and workarounds

The issue has been fixed in various Linux kernel versions. Ubuntu has released patches for affected versions: Ubuntu 20.04 LTS (Focal) received the fix in version 5.4.0-186.206, and Ubuntu 18.04 LTS (Bionic) received the fix in version 5.4.0-186.206~18.04.1. Users should update their systems to the patched versions (Ubuntu Security).

Additional resources


SourceThis report was generated using AI

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management