CVE-2021-47258

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a memory leak in the Linux kernel's SCSI core. When a device is initialized via device initialize() or its name is set via dev set name(), it must be freed via put device() to prevent a memory leak. The leak occurs because the device name is allocated dynamically in dev set name(). The fix involves replacing kfree() with put device() and removing special-casing for IDA and kthread removal from the error handling, as scsi host dev release() properly handles these.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.