CVE-2021-47550: 
Linux Kernel vulnerability analysis and mitigation

CVE-2021-47550 is a memory leak vulnerability in the Linux kernel's AMD GPU driver (drm/amd/amdgpu). The vulnerability was discovered in the amdgpu_get_xgmi_hive function, where a potential memory leak occurs when kobject_init_and_add fails and kobject_put is not called. This affects Linux kernel versions up to (excluding) 5.10.84 and from 5.11 up to (excluding) 5.15.7 (NVD).

The vulnerability exists in the AMD GPU driver's XGMI (GPU Memory Interconnect) handling code. When the kobject_init_and_add function fails in amdgpu_get_xgmi_hive, the code path did not properly release allocated memory by calling kobject_put before freeing the hive structure, resulting in a memory leak. The vulnerability has been assigned a CVSS v3.1 Base Score of 5.5 (MEDIUM) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (NVD).

The vulnerability can lead to memory leaks in the Linux kernel when using AMD GPUs with XGMI functionality. This could potentially result in system resource depletion over time, affecting system availability (NVD).

The vulnerability requires local access with low privileges to exploit. No active exploits have been reported in the wild (NVD).

The vulnerability has been fixed by adding a kobject_put call before freeing the hive structure when kobject_init_and_add fails. The fix was implemented in the Linux kernel through patches committed to various kernel versions. Users should upgrade to Linux kernel version 5.10.84 or later for the 5.10 series, or version 5.15.7 or later for the 5.15 series (Kernel Patch).