CVE-2021-47051

spi: fsl-lpspi: Fix PM reference leak in lpspi_prepare_xfer_hardware()

Description

In the Linux kernel, the following vulnerability has been resolved: spi: fsl-lpspi: Fix PM reference leak in lpspi_prepare_xfer_hardware() pm_runtime_get_sync will increment pm usage counter even it failed. Forgetting to putting operation will result in reference leak here. Fix it by replacing it with pm_runtime_resume_and_get to keep usage counter balanced.

5.5

CVSS

Severity: Medium

CVSS 3.1 •

EPSS 0.01%

Affected: Linux Linux

References

Link	Tags
https://git.kernel.org/stable/c/4a01ad002d2e03c399af536562693752af7c81b1	patch
https://git.kernel.org/stable/c/ce02e58ddf8658a4c3bed2296f32a5873b3f7cce	patch
https://git.kernel.org/stable/c/b8207bfc539cd07d15e753ff2d179c5b61c673b1	patch
https://git.kernel.org/stable/c/6a2b5cee0d31ab6cc51030c441135b0e31217282	patch
https://git.kernel.org/stable/c/a03675497970a93fcf25d81d9d92a59c2d7377a7	patch

Frequently Asked Questions

What is the severity of CVE-2021-47051?: CVE-2021-47051 has been scored as a medium severity vulnerability.
How to fix CVE-2021-47051?: To fix CVE-2021-47051, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2021-47051 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2021-47051 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2021-47051?: CVE-2021-47051 affects Linux Linux, Linux Linux.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.