5.5

CVE-2021-47425: i2c: acpi: fix resource leak in reconfiguration device addition

Analyzed
AliasesUBUNTU-CVE-2021-47425DEBIAN-CVE-2021-47425
Published 21-05-2024Last modified 11-05-2026

Vulnerability summary

CVE-2021-47425 is a medium (CVSS 5.5) vulnerability in linux. EPSS estimates a 0.23% chance of exploitation in the next 30 days, higher than 14.3% of scored vulnerabilities.

Priority
Routine

Not severe (CVSS 5.5, local access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?
CVSS score
5.5/10
010
Medium · v3.1 (NVD)
EPSS score
0.23%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 11 · Related 11
SUSE-SU-2024:2008-1SUSE-SU-2024:2010-1SUSE-SU-2024:2011-1SUSE-SU-2024:2019-1SUSE-SU-2024:2183-1SUSE-SU-2024:2185-1

Timeline

  1. 21-05-2024
    PublishedVulnerability first disclosed.
  2. 11-05-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: i2c: acpi: fix resource leak in reconfiguration device addition acpi_i2c_find_adapter_by_handle() calls bus_find_device() which takes a reference on the adapter which is never released which will result in a reference count leak and render the adapter unremovable. Make sure to put the adapter after creating the client in the same manner that we do for OF. [wsa: fixed title]

CVSS metrics

3 scores · 3 sources · 1 version

EPSS trend

Probability

0.23%

Chance of exploitation in the next 30 days

Percentile

14%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.23% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Version check

Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Ubuntu86 products
  • linux< 4.15.0-166.174 | < 5.4.0-92.103
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws< 4.15.0-1118.125 | < 5.4.0-1061.64
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ 525e6fabeae286848592363bda13bc34b59bb5ac, < b8090a84d7758b929d348bafbd86bb7a10c5fb63 | ≥ 525e6fabeae286848592363bda13bc34b59bb5ac, < 3d9d458a8aaafa47268ea4f1b4114a9f12927989 | ≥ 525e6fabeae286848592363bda13bc34b59bb5ac, < 60bacf259e8c2eb2324f3e13275200baaee9494b | ≥ 525e6fabeae286848592363bda13bc34b59bb5ac, < f86de018fd7a24ee07372d55ffa7824f0c674a95 | ≥ 525e6fabeae286848592363bda13bc34b59bb5ac, < 90f1077c9184ec2ae9989e4642f211263f301694 | ≥ 525e6fabeae286848592363bda13bc34b59bb5ac, < 6558b646ce1c2a872fe1c2c7cb116f05a2c1950f | 4.8
  • linux_kernel≥ 4.8, < 4.14.251 | ≥ 4.15, < 4.19.211 | ≥ 4.20, < 5.4.153 | ≥ 5.5, < 5.10.73 | ≥ 5.11, < 5.14.12 | 5.15:rc1 | 5.15:rc2 | 5.15:rc3 | 5.15:rc4
Debian1 product
  • linux< 5.14.12-1

3 vendors · 89 products

References

10 links