CVE-2021-47116

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-47116
In the Linux kernel, the following vulnerability has been resolved: ext4: fix memory leak in ext4_mb_init_backend on error path. Fix a memory leak discovered by syzbot when a file system is corrupted with an illegally large s_log_groups_per_flex.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/04fb2baa0b147f51db065a1b13a11954abe592d0 Patch
https://git.kernel.org/stable/c/2050c6e5b161e5e25ce3c420fef58b24fa388a49 Patch
https://git.kernel.org/stable/c/a8867f4e3809050571c98de7a2d465aff5e4daf5 Patch
https://git.kernel.org/stable/c/04fb2baa0b147f51db065a1b13a11954abe592d0 Patch
https://git.kernel.org/stable/c/2050c6e5b161e5e25ce3c420fef58b24fa388a49 Patch
https://git.kernel.org/stable/c/a8867f4e3809050571c98de7a2d465aff5e4daf5 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc4:*:*:*:*:*:*
History

07 Jan 2025, 17:31

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux
Linux linux Kernel
References () https://git.kernel.org/stable/c/04fb2baa0b147f51db065a1b13a11954abe592d0 - () https://git.kernel.org/stable/c/04fb2baa0b147f51db065a1b13a11954abe592d0 - Patch
References () https://git.kernel.org/stable/c/2050c6e5b161e5e25ce3c420fef58b24fa388a49 - () https://git.kernel.org/stable/c/2050c6e5b161e5e25ce3c420fef58b24fa388a49 - Patch
References () https://git.kernel.org/stable/c/a8867f4e3809050571c98de7a2d465aff5e4daf5 - () https://git.kernel.org/stable/c/a8867f4e3809050571c98de7a2d465aff5e4daf5 - Patch
CPE cpe:2.3:o:linux:linux_kernel:5.13:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc4:*:*:*:*:*:*
CWE CWE-401

21 Nov 2024, 06:35

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/04fb2baa0b147f51db065a1b13a11954abe592d0 - () https://git.kernel.org/stable/c/04fb2baa0b147f51db065a1b13a11954abe592d0 -
References () https://git.kernel.org/stable/c/2050c6e5b161e5e25ce3c420fef58b24fa388a49 - () https://git.kernel.org/stable/c/2050c6e5b161e5e25ce3c420fef58b24fa388a49 -
References () https://git.kernel.org/stable/c/a8867f4e3809050571c98de7a2d465aff5e4daf5 - () https://git.kernel.org/stable/c/a8867f4e3809050571c98de7a2d465aff5e4daf5 -
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: ext4: corrige la pérdida de memoria en ext4_mb_init_backend en la ruta de error. Solucione una pérdida de memoria descubierta por syzbot cuando un sistema de archivos está dañado con un s_log_groups_per_flex ilegalmente grande.

15 Mar 2024, 21:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-03-15 21:15

Updated : 2025-01-07 17:31

NVD link : CVE-2021-47116

Mitre link : CVE-2021-47116

CVE.ORG link : CVE-2021-47116

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime