Memory Leak Vulnerability in Linux Kernel for ETAS ES58X Products

CVE-2021-47671

Summary

A memory leak vulnerability was identified in the Linux kernel within the es58x_rx_err_msg() function of the ETAS ES58X module. When the can->do_set_mode() call fails, the function returns directly, neglecting to free the skb previously allocated by alloc_can_err_skb(). This oversight results in a memory leak, potentially leading to performance degradation or resource exhaustion. The issue has been resolved through patching, allowing for proper management of the skb resources even in error conditions.

References