5.5

CVE-2021-46985: ACPI: scan: Fix a memory leak in an error handling path

Analyzed
AliasesUBUNTU-CVE-2021-46985DEBIAN-CVE-2021-46985
Published 28-02-2024Last modified 23-05-2026

Vulnerability summary

CVE-2021-46985 is a medium (CVSS 5.5) vulnerability in linux. EPSS estimates a 0.25% chance of exploitation in the next 30 days, higher than 16.3% of scored vulnerabilities.

Priority
Routine

Not severe (CVSS 5.5, local access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?
CVSS score
5.5/10
010
Medium · v3.1 (NVD)
EPSS score
0.25%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded

Timeline

  1. 28-02-2024
    PublishedVulnerability first disclosed.
  2. 23-05-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: ACPI: scan: Fix a memory leak in an error handling path If 'acpi_device_set_name()' fails, we must free 'acpi_device_bus_id->bus_id' or there is a (potential) memory leak.

CVSS metrics

3 scores · 3 sources · 1 version

EPSS trend

Probability

0.25%

Chance of exploitation in the next 30 days

Percentile

16%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.25% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Version check

Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Ubuntu85 products
  • linux< 4.15.0-151.157 | < 5.4.0-80.90
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws< 4.15.0-1109.116 | < 5.4.0-1054.57
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ e5cdbe419004e172f642e876a671a9ff1c52f8bb, < 6901a4f795e0e8d65ae779cb37fc22e0bf294712 | ≥ 717d9d88fbd956ab03fad97266f6ce63a036e7f8, < 5ab9857dde7c3ea3faef6b128d718cf8ba98721b | ≥ 7385e438e1f31af5b86f72fd19b0dcd2738502c9, < 69cc821e89ce572884548ac54c4f80eec7a837a5 | ≥ bc0b1a2036dd8072106ec81a8685ecb901f72ed6, < dafd4c0b5e835db020cff11c74b4af9493a58e72 | ≥ 4a5891992c680d69d7e490e4d0428d17779d8e85, < e2381174daeae0ca35eddffef02dcc8de8c1ef8a | ≥ 321dbe6c0b551f9f8030becc6900f77cf9bbb9ad, < c5c8f6ffc942cf42f990f22e35bcf4cbe9d8c2fb | ≥ eb50aaf960e3bedfef79063411ffd670da94b84b, < a7e17a8d421ae23c920240625b4413c7b94d94a4 | ≥ eb50aaf960e3bedfef79063411ffd670da94b84b, < 0c8bd174f0fc131bc9dfab35cd8784f59045da87 | ≥ 4.9.264, < 4.9.269 | ≥ 4.14.228, < 4.14.233 | ≥ 4.19.184, < 4.19.191 | ≥ 5.4.109, < 5.4.120 | ≥ 5.10.27, < 5.10.38 | ≥ 5.11.11, < 5.11.22 | 5.12
  • linux_kernel≥ 4.9.264, < 4.9.269 | ≥ 4.14.228, < 4.14.233 | ≥ 4.19.184, < 4.19.191 | ≥ 5.4.109, < 5.4.120 | ≥ 5.10.27, < 5.10.38 | ≥ 5.11.11, < 5.11.22 | ≥ 5.12, < 5.12.5 | 5.13:rc1
Debian1 product
  • linux< 5.10.38-1

3 vendors · 88 products

References

12 links
Show all 12 references