CVE-2021-47425: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: i2c: acpi: fix resource leak in reconfiguration device addition acpi_i2c_find_adapter_by_handle() calls bus_find_device() which takes a reference on the adapter which is never released which will result in a reference count leak and render the adapter unremovable. Make sure to put the adapter after creating the client in the same manner that we do for OF. [wsa: fixed title]

Affected products

• Linux Linux Kernel: from 4.8, before 4.14.251 (fixed in 4.14.251); from 4.15, before 4.19.211 (fixed in 4.19.211); from 4.20, before 5.4.153 (fixed in 5.4.153); from 5.5, before 5.10.73 (fixed in 5.10.73); from 5.11, before 5.14.12 (fixed in 5.14.12); version 5.15 only

Published 2024-05-21. Last modified 2026-06-17.