In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix error handling of scsi_host_alloc() After device is initialized via device_initialize(), or its name is set via dev_set_name(), the device has to be freed via put_device(). Otherwise device name will be leaked because it is allocated dynamically in dev_set_name(). Fix the leak by replacing kfree() with put_device(). Since scsi_host_dev_release() properly handles IDA and kthread removal, remove special-casing these from the error handling as well.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc5:*:*:*:*:*:*

No data.

References
Link Providers
https://git.kernel.org/stable/c/2dc85045ae65b9302a1d2e2ddd7ce4c030153a6a cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/45d83db4728127944b237c0c8248987df9d478e7 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/66a834d092930cf41d809c0e989b13cd6f9ca006 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/79296e292d67fa7b5fb8d8c27343683e823872c8 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/7a696ce1d5d16a33a6cd6400bbcc0339b2460e11 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/8958181c1663e24a13434448e7d6b96b5d04900a cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/db08ce595dd64ea9859f7d088b51cbfc8e685c66 cve-icon cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024052146-CVE-2021-47258-f276@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2021-47258 cve-icon
https://www.cve.org/CVERecord?id=CVE-2021-47258 cve-icon
History

Wed, 30 Apr 2025 15:30:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses CWE-401
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc5:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
Metrics cvssV3_1

{'score': 6.1, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L'}

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-05-21T14:19:52.082Z

Updated: 2024-12-19T07:38:23.306Z

Reserved: 2024-04-10T18:59:19.540Z

Link: CVE-2021-47258

cve-icon Vulnrichment

Updated: 2024-08-04T05:32:07.870Z

cve-icon NVD

Status : Analyzed

Published: 2024-05-21T15:15:14.537

Modified: 2025-04-30T15:05:14.067

Link: CVE-2021-47258

cve-icon Redhat

Severity : Low

Publid Date: 2024-05-21T00:00:00Z

Links: CVE-2021-47258 - Bugzilla