CVE-2021-47467

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-47467
In the Linux kernel, the following vulnerability has been resolved: kunit: fix reference count leak in kfree_at_end The reference counting issue happens in the normal path of kfree_at_end(). When kunit_alloc_and_get_resource() is invoked, the function forgets to handle the returned resource object, whose refcount increased inside, causing a refcount leak. Fix this issue by calling kunit_alloc_resource() instead of kunit_alloc_and_get_resource(). Fixed the following when applying: Shuah Khan <skhan@linuxfoundation.org> CHECK: Alignment should match open parenthesis + kunit_alloc_resource(test, NULL, kfree_res_free, GFP_KERNEL, (void *)to_free);

5.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/bbdd158b40b66a9403391a517f24ef6613573446 Patch
https://git.kernel.org/stable/c/f62314b1ced25c58b86e044fc951cd6a1ea234cf Patch
https://git.kernel.org/stable/c/bbdd158b40b66a9403391a517f24ef6613573446 Patch
https://git.kernel.org/stable/c/f62314b1ced25c58b86e044fc951cd6a1ea234cf Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15:rc5:*:*:*:*:*:*
History

02 Apr 2025, 15:11

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/bbdd158b40b66a9403391a517f24ef6613573446 - () https://git.kernel.org/stable/c/bbdd158b40b66a9403391a517f24ef6613573446 - Patch
References () https://git.kernel.org/stable/c/f62314b1ced25c58b86e044fc951cd6a1ea234cf - () https://git.kernel.org/stable/c/f62314b1ced25c58b86e044fc951cd6a1ea234cf - Patch
CWE NVD-CWE-Other
First Time Linux linux Kernel
Linux
CPE cpe:2.3:o:linux:linux_kernel:5.15:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

21 Nov 2024, 06:36

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/bbdd158b40b66a9403391a517f24ef6613573446 - () https://git.kernel.org/stable/c/bbdd158b40b66a9403391a517f24ef6613573446 -
References () https://git.kernel.org/stable/c/f62314b1ced25c58b86e044fc951cd6a1ea234cf - () https://git.kernel.org/stable/c/f62314b1ced25c58b86e044fc951cd6a1ea234cf -

05 Nov 2024, 16:35

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: kunit: corrige la fuga del recuento de referencias en kfree_at_end El problema del recuento de referencias ocurre en la ruta normal de kfree_at_end(). Cuando se invoca kunit_alloc_and_get_resource(), la función se olvida de manejar el objeto de recurso devuelto, cuyo recuento aumentó en el interior, lo que provoca una fuga de recuento. Solucione este problema llamando a kunit_alloc_resource() en lugar de kunit_alloc_and_get_resource(). Se corrigió lo siguiente al aplicar: Shuah Khan VERIFICAR: La alineación debe coincidir con el paréntesis abierto + kunit_alloc_resource(test, NULL, kfree_res_free, GFP_KERNEL, (void *)to_free);
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.3

22 May 2024, 07:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-22 07:15

Updated : 2025-04-02 15:11

NVD link : CVE-2021-47467

Mitre link : CVE-2021-47467

CVE.ORG link : CVE-2021-47467

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-Other