CVE-2021-47075: Linux Kernel

Medium severity, CVSS 5.3. EPSS: 0.9% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: nvmet: fix memory leak in nvmet_alloc_ctrl() When creating ctrl in nvmet_alloc_ctrl(), if the cntlid_min is larger than cntlid_max of the subsystem, and jumps to the "out_free_changed_ns_list" label, but the ctrl->sqs lack of be freed. Fix this by jumping to the "out_free_sqs" label.

Affected products

• Linux Linux Kernel: from 5.7, before 5.10.40 (fixed in 5.10.40); from 5.11, before 5.12.7 (fixed in 5.12.7); version 5.13 only

Published 2024-03-01. Last modified 2026-06-17.