| The CVE-2021-47053 vulnerability affects the Linux kernel's `sun8i-ss` cryptographic driver, specifically in the `sun8i-ss-hash.c` file. The issue is a memory leak of the `pad` structure, which occurs due to several failure return paths not freeing the `pad` resource properly. |
| The memory leak was introduced in kernel version 5.10 with commit `d9b45418a917` and has been fixed in various subsequent versions, including 5.10.37, 5.11.21, 5.12.4, and 5.13. The fixes can be found in commits `2c67a9333da9`, `c633e025bd04`, `d3d702084d12`, and `50274b01ac16`, respectively. |
| The Linux kernel CVE team recommends updating to the latest stable kernel version to resolve this issue, as well as other bugfixes. Cherry-picking individual commits is not recommended or supported by the Linux kernel community. |
