CVE-2021-47538

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-47538
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() Need to call rxrpc_put_local() for peer candidate before kfree() as it holds a ref to rxrpc_local. [DH: v2: Changed to abstract the peer freeing code out into a function]

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/3e70e3a72d80b16094faccbe438cd53761c3503a Patch
https://git.kernel.org/stable/c/60f0b9c42cb80833a03ca57c1c8b078d716e71d1 Patch
https://git.kernel.org/stable/c/913c24af2d13a3fd304462916ee98e298d56bdce Patch
https://git.kernel.org/stable/c/9469273e616ca8f1b6e3773c5019f21b4c8d828c Patch
https://git.kernel.org/stable/c/beacff50edbd6c9659a6f15fc7f6126909fade29 Patch
https://git.kernel.org/stable/c/3e70e3a72d80b16094faccbe438cd53761c3503a Patch
https://git.kernel.org/stable/c/60f0b9c42cb80833a03ca57c1c8b078d716e71d1 Patch
https://git.kernel.org/stable/c/913c24af2d13a3fd304462916ee98e298d56bdce Patch
https://git.kernel.org/stable/c/9469273e616ca8f1b6e3773c5019f21b4c8d828c Patch
https://git.kernel.org/stable/c/beacff50edbd6c9659a6f15fc7f6126909fade29 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.4:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.4:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.4:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.4:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.4:rc7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.4:rc8:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.16:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.16:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.16:rc3:*:*:*:*:*:*
History

18 Sep 2025, 15:55

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux
Linux linux Kernel
CWE CWE-401
CPE cpe:2.3:o:linux:linux_kernel:5.4:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.4:rc8:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.16:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.4:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.16:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.4:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.4:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.16:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.4:rc7:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/3e70e3a72d80b16094faccbe438cd53761c3503a - () https://git.kernel.org/stable/c/3e70e3a72d80b16094faccbe438cd53761c3503a - Patch
References () https://git.kernel.org/stable/c/60f0b9c42cb80833a03ca57c1c8b078d716e71d1 - () https://git.kernel.org/stable/c/60f0b9c42cb80833a03ca57c1c8b078d716e71d1 - Patch
References () https://git.kernel.org/stable/c/913c24af2d13a3fd304462916ee98e298d56bdce - () https://git.kernel.org/stable/c/913c24af2d13a3fd304462916ee98e298d56bdce - Patch
References () https://git.kernel.org/stable/c/9469273e616ca8f1b6e3773c5019f21b4c8d828c - () https://git.kernel.org/stable/c/9469273e616ca8f1b6e3773c5019f21b4c8d828c - Patch
References () https://git.kernel.org/stable/c/beacff50edbd6c9659a6f15fc7f6126909fade29 - () https://git.kernel.org/stable/c/beacff50edbd6c9659a6f15fc7f6126909fade29 - Patch

21 Nov 2024, 06:36

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/3e70e3a72d80b16094faccbe438cd53761c3503a - () https://git.kernel.org/stable/c/3e70e3a72d80b16094faccbe438cd53761c3503a -
References () https://git.kernel.org/stable/c/60f0b9c42cb80833a03ca57c1c8b078d716e71d1 - () https://git.kernel.org/stable/c/60f0b9c42cb80833a03ca57c1c8b078d716e71d1 -
References () https://git.kernel.org/stable/c/913c24af2d13a3fd304462916ee98e298d56bdce - () https://git.kernel.org/stable/c/913c24af2d13a3fd304462916ee98e298d56bdce -
References () https://git.kernel.org/stable/c/9469273e616ca8f1b6e3773c5019f21b4c8d828c - () https://git.kernel.org/stable/c/9469273e616ca8f1b6e3773c5019f21b4c8d828c -
References () https://git.kernel.org/stable/c/beacff50edbd6c9659a6f15fc7f6126909fade29 - () https://git.kernel.org/stable/c/beacff50edbd6c9659a6f15fc7f6126909fade29 -
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: rxrpc: corrigió la fuga de rxrpc_local en rxrpc_lookup_peer() Es necesario llamar a rxrpc_put_local() para el candidato par antes de kfree(), ya que contiene una referencia a rxrpc_local. [DH: v2: modificado para abstraer el código de liberación del par en una función]

24 May 2024, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-24 15:15

Updated : 2025-09-18 15:55

NVD link : CVE-2021-47538

Mitre link : CVE-2021-47538

CVE.ORG link : CVE-2021-47538

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime