CVE-2021-47466

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-47466
In the Linux kernel, the following vulnerability has been resolved: mm, slub: fix potential memoryleak in kmem_cache_open() In error path, the random_seq of slub cache might be leaked. Fix this by using __kmem_cache_release() to release all the relevant resources.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/42b81946e3ac9ea0372ba16e05160dc11e02694f Patch
https://git.kernel.org/stable/c/4f5d1c29cfab5cb0ab885059818751bdef32e2bb Patch
https://git.kernel.org/stable/c/568f906340b43120abd6fcc67c37396482f85930 Patch
https://git.kernel.org/stable/c/9037c57681d25e4dcc442d940d6dbe24dd31f461 Patch
https://git.kernel.org/stable/c/42b81946e3ac9ea0372ba16e05160dc11e02694f Patch
https://git.kernel.org/stable/c/4f5d1c29cfab5cb0ab885059818751bdef32e2bb Patch
https://git.kernel.org/stable/c/568f906340b43120abd6fcc67c37396482f85930 Patch
https://git.kernel.org/stable/c/9037c57681d25e4dcc442d940d6dbe24dd31f461 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15:rc6:*:*:*:*:*:*
History

07 Jan 2025, 20:13

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/42b81946e3ac9ea0372ba16e05160dc11e02694f - () https://git.kernel.org/stable/c/42b81946e3ac9ea0372ba16e05160dc11e02694f - Patch
References () https://git.kernel.org/stable/c/4f5d1c29cfab5cb0ab885059818751bdef32e2bb - () https://git.kernel.org/stable/c/4f5d1c29cfab5cb0ab885059818751bdef32e2bb - Patch
References () https://git.kernel.org/stable/c/568f906340b43120abd6fcc67c37396482f85930 - () https://git.kernel.org/stable/c/568f906340b43120abd6fcc67c37396482f85930 - Patch
References () https://git.kernel.org/stable/c/9037c57681d25e4dcc442d940d6dbe24dd31f461 - () https://git.kernel.org/stable/c/9037c57681d25e4dcc442d940d6dbe24dd31f461 - Patch
CWE CWE-401
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:5.15:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15:rc1:*:*:*:*:*:*
First Time Linux
Linux linux Kernel

21 Nov 2024, 06:36

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: mm, slub: corrige una posible pérdida de memoria en kmem_cache_open() En la ruta del error, es posible que se haya filtrado el random_seq del caché slub. Solucione este problema usando __kmem_cache_release() para liberar todos los recursos relevantes.
References () https://git.kernel.org/stable/c/42b81946e3ac9ea0372ba16e05160dc11e02694f - () https://git.kernel.org/stable/c/42b81946e3ac9ea0372ba16e05160dc11e02694f -
References () https://git.kernel.org/stable/c/4f5d1c29cfab5cb0ab885059818751bdef32e2bb - () https://git.kernel.org/stable/c/4f5d1c29cfab5cb0ab885059818751bdef32e2bb -
References () https://git.kernel.org/stable/c/568f906340b43120abd6fcc67c37396482f85930 - () https://git.kernel.org/stable/c/568f906340b43120abd6fcc67c37396482f85930 -
References () https://git.kernel.org/stable/c/9037c57681d25e4dcc442d940d6dbe24dd31f461 - () https://git.kernel.org/stable/c/9037c57681d25e4dcc442d940d6dbe24dd31f461 -

22 May 2024, 07:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-22 07:15

Updated : 2025-01-07 20:13

NVD link : CVE-2021-47466

Mitre link : CVE-2021-47466

CVE.ORG link : CVE-2021-47466

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime