CVE-2021-47151: 
Linux Debian vulnerability analysis and mitigation

In the Linux kernel, a vulnerability was discovered in the interconnect qcom bcm-voter component. The issue (CVE-2021-47151) involves a missing of_node_put() call in the of_bcm_voter_get() function, which could lead to a reference leak. This vulnerability was resolved by adding the missing of_node_put() call to avoid the reference leak (Kernel Git).

The vulnerability exists in the Linux kernel's interconnect subsystem, specifically in the Qualcomm BCM voter driver. The issue stems from a missing of_node_put() call in the of_bcm_voter_get() function, which could result in a device tree node reference leak. The fix involves adding the missing of_node_put(node) call after the mutex_unlock operation to properly release the reference (Kernel Git). The vulnerability has been assigned a CVSS v3 base score of 6.0 by Red Hat, indicating medium severity (Red Hat).

The vulnerability could lead to a resource leak in the kernel's memory management system. When exploited, it could result in a gradual consumption of system resources due to unreleased device tree node references (Red Hat).

The vulnerability requires local access with high privileges to be exploited. The attack complexity is considered low, but the attacker needs elevated permissions to trigger the vulnerable code path (Red Hat).

The vulnerability has been fixed by adding the missing of_node_put() call in the kernel code. Users should update their Linux kernel to a version that includes the fix. The patch has been backported to various stable kernel versions (Kernel Git).