CVE-2021-47093: 
Linux Kernel vulnerability analysis and mitigation

CVE-2021-47093 is a vulnerability in the Linux kernel affecting the Intel PMC Core platform driver. The issue was discovered and disclosed in February 2024, specifically related to a memory leak condition in the platform/x86 intel_pmc_core module during device registration failure (CVE Details).

The vulnerability occurs when device registration fails during module initialization in the Intel PMC Core platform driver. The issue stems from improper resource cleanup, where the platform device structure was not being properly freed using platform_device_put(), leading to a memory leak of resources including the device name. This was introduced by a previous commit '938835aa903a' which changed the device structure handling (Kernel Commit).

The vulnerability results in a memory leak condition which could potentially lead to resource exhaustion over time. The severity is rated as Low with a CVSS v3 base score of 5.5, primarily affecting system availability (Red Hat).

The vulnerability requires local access with low attack complexity and low privileges to exploit. The attack vector is local, requiring an attacker to have access to the affected system (Red Hat).

The issue has been fixed by replacing the kfree() call with platform_device_put() to properly free all resources when device registration fails. The fix was implemented in the Linux kernel through a patch that ensures proper cleanup of platform device resources (Kernel Commit).