CVE-2021-47364: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: comedi: Fix memory leak in compat_insnlist() `compat_insnlist()` handles the 32-bit version of the `COMEDI_INSNLIST` ioctl (whenwhen `CONFIG_COMPAT` is enabled). It allocates memory to temporarily hold an array of `struct comedi_insn` converted from the 32-bit version in user space. This memory is only being freed if there is a fault while filling the array, otherwise it is leaked. Add a call to `kfree()` to fix the leak.

Affected products

• Linux Linux Kernel: from 5.8, before 5.10.70 (fixed in 5.10.70); from 5.11, before 5.14.9 (fixed in 5.14.9); version 5.15 only

Published 2024-05-21. Last modified 2026-06-17.