{
  "cveId": "CVE-2021-47180",
  "url": "https://patchblox.com/security/cve/CVE-2021-47180",
  "summary": "CVE-2021-47180 is fixed in linux on 1 platform, first by DEBIAN-CVE-2021-47180, released March 25, 2024. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  NFC: nci: fix memory leak in nci_allocate_device...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  NFC: nci: fix memory leak in nci_allocate_device  nfcmrvl_disconnect fails to free the hci_dev field in struct nci_dev. Fix this by freeing hci_dev in nci_free_device.  BUG: memory leak unreferenced object 0xffff888111ea6800 (size 1024):   comm \u0022kworker/1:0\u0022, pid 19, jiffies 4294942308 (age 13.580s)   hex dump (first 32 bytes):     00 00 00 00 00 00 00 00 00 60 fd 0c 81 88 ff ff  .........\u0060......     00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................   backtrace:     [\u003C000000004bc25d43\u003E] kmalloc include/linux/slab.h:552 [inline]     [\u003C000000004bc25d43\u003E] kzalloc include/linux/slab.h:682 [inline]     [\u003C000000004bc25d43\u003E] nci_hci_allocate\u002B0x21/0xd0 net/nfc/nci/hci.c:784     [\u003C00000000c59cff92\u003E] nci_allocate_device net/nfc/nci/core.c:1170 [inline]     [\u003C00000000c59cff92\u003E] nci_allocate_device\u002B0x10b/0x160 net/nfc/nci/core.c:1132     [\u003C00000000006e0a8e\u003E] nfcmrvl_nci_register_dev\u002B0x10a/0x1c0 drivers/nfc/nfcmrvl/main.c:153     [\u003C000000004da1b57e\u003E] nfcmrvl_probe\u002B0x223/0x290 drivers/nfc/nfcmrvl/usb.c:345     [\u003C00000000d506aed9\u003E] usb_probe_interface\u002B0x177/0x370 drivers/usb/core/driver.c:396     [\u003C00000000bc632c92\u003E] really_probe\u002B0x159/0x4a0 drivers/base/dd.c:554     [\u003C00000000f5009125\u003E] driver_probe_device\u002B0x84/0x100 drivers/base/dd.c:740     [\u003C000000000ce658ca\u003E] __device_attach_driver\u002B0xee/0x110 drivers/base/dd.c:846     [\u003C000000007067d05f\u003E] bus_for_each_drv\u002B0xb7/0x100 drivers/base/bus.c:431     [\u003C00000000f8e13372\u003E] __device_attach\u002B0x122/0x250 drivers/base/dd.c:914     [\u003C000000009cf68860\u003E] bus_probe_device\u002B0xc6/0xe0 drivers/base/bus.c:491     [\u003C00000000359c965a\u003E] device_add\u002B0x5be/0xc30 drivers/base/core.c:3109     [\u003C00000000086e4bd3\u003E] usb_set_configuration\u002B0x9d9/0xb90 drivers/usb/core/message.c:2164     [\u003C00000000ca036872\u003E] usb_generic_driver_probe\u002B0x8c/0xc0 drivers/usb/core/generic.c:238     [\u003C00000000d40d36f6\u003E] usb_probe_device\u002B0x5c/0x140 drivers/usb/core/driver.c:293     [\u003C00000000bc632c92\u003E] really_probe\u002B0x159/0x4a0 drivers/base/dd.c:554",
  "published": "2024-03-25T10:15:09Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00226,
  "epssPercentile": 0.13383,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "5.14.6-1",
      "fix": "DEBIAN-CVE-2021-47180",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2021-47180",
      "released": "2024-03-25T10:15:09Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "5.14.6-1",
      "fix": "DEBIAN-CVE-2021-47180",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2021-47180",
      "released": "2024-03-25T10:15:09Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "5.14.6-1",
      "fix": "DEBIAN-CVE-2021-47180",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2021-47180",
      "released": "2024-03-25T10:15:09Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T01:18:40Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}