Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.5
CVE-2021-47161: Linux kernel SPI driver may run out of resources
CVE-2021-47161 · published 2 years ago
Summary
The SPI driver in several Linux distributions can leave memory allocated when an error occurs, potentially reducing system performance over time. This issue affects the listed Ubuntu-based cloud images. Updating the operating system to the latest kernel version resolves the problem.
What to do
- Update canonical linux-azure to version 4.15.0-1124.137~14.04.1.
- Update canonical linux-aws-hwe to version 4.15.0-1112.119~16.04.1.
- Update canonical linux-azure to version 4.15.0-1124.137~16.04.1.
- Update canonical linux-gcp to version 4.15.0-1109.123~16.04.1.
- Update canonical linux-hwe to version 4.15.0-159.167~16.04.1.
- Update canonical linux-oracle to version 4.15.0-1081.89~16.04.1.
- Update canonical linux to version 4.15.0-159.167.
- Update canonical linux-aws to version 4.15.0-1112.119.
- Update canonical linux-aws-5.4 to version 5.4.0-1054.57~18.04.1.
- Update canonical linux-azure-4.15 to version 4.15.0-1124.137.
- Update canonical linux-azure-5.4 to version 5.4.0-1055.57~18.04.1.
- Update canonical linux-gcp-4.15 to version 4.15.0-1109.123.
- Update canonical linux-gcp-5.4 to version 5.4.0-1049.53~18.04.1.
- Update canonical linux-hwe-5.4 to version 5.4.0-80.90~18.04.1.
- Update canonical linux-kvm to version 4.15.0-1100.102.
- Update canonical linux-oracle to version 4.15.0-1081.89.
- Update canonical linux-oracle-5.4 to version 5.4.0-1052.56~18.04.1.
- Update canonical linux-raspi-5.4 to version 5.4.0-1041.45~18.04.1.
- Update canonical linux-aws-fips to version 4.15.0-2054.56.
- Update canonical linux-azure-fips to version 4.15.0-2036.40.
- Update canonical linux-fips to version 4.15.0-1070.79.
- Update canonical linux-gcp-fips to version 4.15.0-2019.21.
- Update canonical linux to version 5.4.0-80.90.
- Update canonical linux-aws to version 5.4.0-1054.57.
- Update canonical linux-azure to version 5.4.0-1055.57.
- Update canonical linux-bluefield to version 5.4.0-1016.19.
- Update canonical linux-gcp to version 5.4.0-1049.53.
- Update canonical linux-gkeop to version 5.4.0-1021.22.
- Update canonical linux-kvm to version 5.4.0-1044.46.
- Update canonical linux-oracle to version 5.4.0-1052.56.
- Update canonical linux-raspi to version 5.4.0-1041.45.
- Update canonical linux-aws-fips to version 5.4.0-1069.73+fips2.
- Update canonical linux-azure-fips to version 5.4.0-1073.76+fips1.
- Update canonical linux-fips to version 5.4.0-1031.36.
- Update canonical linux-gcp-fips to version 5.4.0-1067.71~20.04.1.
- Update debian linux to version 5.14.6-1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:Pro:14.04:LTS | canonical | linux-azure |
< 4.15.0-1124.137~14.04.1 Fix: upgrade to 4.15.0-1124.137~14.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws-hwe |
< 4.15.0-1112.119~16.04.1 Fix: upgrade to 4.15.0-1112.119~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-azure |
< 4.15.0-1124.137~16.04.1 Fix: upgrade to 4.15.0-1124.137~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-gcp |
< 4.15.0-1109.123~16.04.1 Fix: upgrade to 4.15.0-1109.123~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-hwe |
< 4.15.0-159.167~16.04.1 Fix: upgrade to 4.15.0-159.167~16.04.1
|
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-oracle |
< 4.15.0-1081.89~16.04.1 Fix: upgrade to 4.15.0-1081.89~16.04.1
|
| Ubuntu:18.04:LTS | canonical | linux |
< 4.15.0-159.167 Fix: upgrade to 4.15.0-159.167
|
| Ubuntu:18.04:LTS | canonical | linux-aws |
< 4.15.0-1112.119 Fix: upgrade to 4.15.0-1112.119
|
| Ubuntu:18.04:LTS | canonical | linux-aws-5.4 |
< 5.4.0-1054.57~18.04.1 Fix: upgrade to 5.4.0-1054.57~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-azure-4.15 |
< 4.15.0-1124.137 Fix: upgrade to 4.15.0-1124.137
|
| Ubuntu:18.04:LTS | canonical | linux-azure-5.4 |
< 5.4.0-1055.57~18.04.1 Fix: upgrade to 5.4.0-1055.57~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-gcp-4.15 |
< 4.15.0-1109.123 Fix: upgrade to 4.15.0-1109.123
|
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.4 |
< 5.4.0-1049.53~18.04.1 Fix: upgrade to 5.4.0-1049.53~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-hwe-5.4 |
< 5.4.0-80.90~18.04.1 Fix: upgrade to 5.4.0-80.90~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-kvm |
< 4.15.0-1100.102 Fix: upgrade to 4.15.0-1100.102
|
| Ubuntu:18.04:LTS | canonical | linux-oracle |
< 4.15.0-1081.89 Fix: upgrade to 4.15.0-1081.89
|
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.4 |
< 5.4.0-1052.56~18.04.1 Fix: upgrade to 5.4.0-1052.56~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-raspi-5.4 |
< 5.4.0-1041.45~18.04.1 Fix: upgrade to 5.4.0-1041.45~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-aws-fips |
< 4.15.0-2054.56 Fix: upgrade to 4.15.0-2054.56
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-azure-fips |
< 4.15.0-2036.40 Fix: upgrade to 4.15.0-2036.40
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-fips |
< 4.15.0-1070.79 Fix: upgrade to 4.15.0-1070.79
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-gcp-fips |
< 4.15.0-2019.21 Fix: upgrade to 4.15.0-2019.21
|
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:20.04:LTS | canonical | linux |
< 5.4.0-80.90 Fix: upgrade to 5.4.0-80.90
|
| Ubuntu:20.04:LTS | canonical | linux-aws |
< 5.4.0-1054.57 Fix: upgrade to 5.4.0-1054.57
|
| Ubuntu:20.04:LTS | canonical | linux-azure |
< 5.4.0-1055.57 Fix: upgrade to 5.4.0-1055.57
|
| Ubuntu:20.04:LTS | canonical | linux-bluefield |
< 5.4.0-1016.19 Fix: upgrade to 5.4.0-1016.19
|
| Ubuntu:20.04:LTS | canonical | linux-gcp |
< 5.4.0-1049.53 Fix: upgrade to 5.4.0-1049.53
|
| Ubuntu:20.04:LTS | canonical | linux-gkeop |
< 5.4.0-1021.22 Fix: upgrade to 5.4.0-1021.22
|
| Ubuntu:20.04:LTS | canonical | linux-kvm |
< 5.4.0-1044.46 Fix: upgrade to 5.4.0-1044.46
|
| Ubuntu:20.04:LTS | canonical | linux-oracle |
< 5.4.0-1052.56 Fix: upgrade to 5.4.0-1052.56
|
Showing 50 of 113. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux-raspi |
< 5.4.0-1041.45 Fix: upgrade to 5.4.0-1041.45
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-aws-fips |
< 5.4.0-1069.73+fips2 Fix: upgrade to 5.4.0-1069.73+fips2
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-azure-fips |
< 5.4.0-1073.76+fips1 Fix: upgrade to 5.4.0-1073.76+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-fips |
< 5.4.0-1031.36 Fix: upgrade to 5.4.0-1031.36
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-gcp-fips |
< 5.4.0-1067.71~20.04.1 Fix: upgrade to 5.4.0-1067.71~20.04.1
|
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:26.04 | canonical | linux-nvidia | All versions |
| – | linux | linux_kernel |
>= 4.10, < 4.14.241 >= 4.15, < 4.19.199 >= 4.20, < 5.4.124 >= 5.5, < 5.10.42 >= 5.11, < 5.12.9 5.13 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Debian:12 | debian | linux |
< 5.14.6-1 Fix: upgrade to 5.14.6-1
|
Original advisory text
In the Linux kernel, the following vulnerability has been resolved: spi: spi-fsl-dspi: Fix a resource leak in an error handling path 'dspi_request_dma()' should be undone by a 'dspi_release_dma()...
In the Linux kernel, the following vulnerability has been resolved: spi: spi-fsl-dspi: Fix a resource leak in an error handling path 'dspi_request_dma()' should be undone by a 'dspi_release_dma()' call in the error handling path of the probe function, as already done in the remove function
References
- https://ubuntu.com/security/CVE-2021-47161 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2021-47161 Third Party Advisory
- https://git.kernel.org/stable/c/fe6921e3b8451a537e01c031b8212366bb386e3e Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2021-47161 Vendor Advisory
- https://git.kernel.org/stable/c/10a089bae827ec30ad9b6cb7048020a62fae0cfa Third Party Advisory
- https://git.kernel.org/stable/c/00450ed03a17143e2433b461a656ef9cd17c2f1d Third Party Advisory
- https://git.kernel.org/stable/c/15d1cc4b4b585f9a2ce72c52cca004d5d735bdf1 Third Party Advisory
- https://git.kernel.org/stable/c/12391be4724acc9269e1845ccbd881df37de4b56 Third Party Advisory
- https://git.kernel.org/stable/c/680ec0549a055eb464dce6ffb4bfb736ef87236e Third Party Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-209Generation of Error Message Containing Sensitive Information
Timeline
Published25 Mar 2024
Updated4 Nov 2026
First seen12 May 2026
Track software like this
Free during beta