CVE-2021-47298

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-47298
In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix potential memory leak on unlikely error case If skb_linearize is needed and fails we could leak a msg on the error handling. To fix ensure we kfree the msg block before returning error. Found during code review.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/6c508a1c6c62793dc6e6872cad4b200097bab7c9 Patch
https://git.kernel.org/stable/c/715f378f42909c401ec043f5150c4fdf57fb8889 Patch
https://git.kernel.org/stable/c/7e6b27a69167f97c56b5437871d29e9722c3e470 Patch
https://git.kernel.org/stable/c/6c508a1c6c62793dc6e6872cad4b200097bab7c9 Patch
https://git.kernel.org/stable/c/715f378f42909c401ec043f5150c4fdf57fb8889 Patch
https://git.kernel.org/stable/c/7e6b27a69167f97c56b5437871d29e9722c3e470 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.14:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.14:rc2:*:*:*:*:*:*
History

23 Dec 2024, 16:39

Type Values Removed Values Added
First Time Linux
Linux linux Kernel
References () https://git.kernel.org/stable/c/6c508a1c6c62793dc6e6872cad4b200097bab7c9 - () https://git.kernel.org/stable/c/6c508a1c6c62793dc6e6872cad4b200097bab7c9 - Patch
References () https://git.kernel.org/stable/c/715f378f42909c401ec043f5150c4fdf57fb8889 - () https://git.kernel.org/stable/c/715f378f42909c401ec043f5150c4fdf57fb8889 - Patch
References () https://git.kernel.org/stable/c/7e6b27a69167f97c56b5437871d29e9722c3e470 - () https://git.kernel.org/stable/c/7e6b27a69167f97c56b5437871d29e9722c3e470 - Patch
CPE cpe:2.3:o:linux:linux_kernel:5.14:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.14:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE CWE-401
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

21 Nov 2024, 06:35

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/6c508a1c6c62793dc6e6872cad4b200097bab7c9 - () https://git.kernel.org/stable/c/6c508a1c6c62793dc6e6872cad4b200097bab7c9 -
References () https://git.kernel.org/stable/c/715f378f42909c401ec043f5150c4fdf57fb8889 - () https://git.kernel.org/stable/c/715f378f42909c401ec043f5150c4fdf57fb8889 -
References () https://git.kernel.org/stable/c/7e6b27a69167f97c56b5437871d29e9722c3e470 - () https://git.kernel.org/stable/c/7e6b27a69167f97c56b5437871d29e9722c3e470 -
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: bpf, sockmap: corrige una posible pérdida de memoria en un caso de error poco probable. Si se necesita skb_linearize y falla, podríamos filtrar un mensaje sobre el manejo de errores. Para solucionarlo, asegúrese de liberar el bloque de mensajes antes de devolver el error. Encontrado durante la revisión del código.

21 May 2024, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-21 15:15

Updated : 2024-12-23 16:39

NVD link : CVE-2021-47298

Mitre link : CVE-2021-47298

CVE.ORG link : CVE-2021-47298

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime