CVE-2021-47660

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-47660
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()' All error handling paths lead to 'out' where many resources are freed. Do it as well here instead of a direct return, otherwise 'log', 'ra' and 'log->one_page_buf' (at least) will leak.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/2c97519ed6b4239594c58ddacf3d0d576cf070cc Patch
https://git.kernel.org/stable/c/bc4a1d384a04c6dba9312e1421a9f9f7c03339a4 Patch
https://git.kernel.org/stable/c/d8be98ab88250dc12a98efdb703792a537b0eac3 Patch
https://git.kernel.org/stable/c/e589f9b7078e1c0191613cd736f598e81d2390de Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

18 Mar 2025, 18:50

Type Values Removed Values Added
CWE CWE-401
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: fs/ntfs3: Se han solucionado algunas fugas de memoria en una ruta de manejo de errores de 'log_replay()'. Todas las rutas de manejo de errores conducen a 'out', donde se liberan muchos recursos. Hágalo también aquí en lugar de un retorno directo, de lo contrario, se producirán fugas de 'log', 'ra' y 'log->one_page_buf' (al menos).
References () https://git.kernel.org/stable/c/2c97519ed6b4239594c58ddacf3d0d576cf070cc - () https://git.kernel.org/stable/c/2c97519ed6b4239594c58ddacf3d0d576cf070cc - Patch
References () https://git.kernel.org/stable/c/bc4a1d384a04c6dba9312e1421a9f9f7c03339a4 - () https://git.kernel.org/stable/c/bc4a1d384a04c6dba9312e1421a9f9f7c03339a4 - Patch
References () https://git.kernel.org/stable/c/d8be98ab88250dc12a98efdb703792a537b0eac3 - () https://git.kernel.org/stable/c/d8be98ab88250dc12a98efdb703792a537b0eac3 - Patch
References () https://git.kernel.org/stable/c/e589f9b7078e1c0191613cd736f598e81d2390de - () https://git.kernel.org/stable/c/e589f9b7078e1c0191613cd736f598e81d2390de - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux
Linux linux Kernel

26 Feb 2025, 06:37

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 06:37

Updated : 2025-03-18 18:50

NVD link : CVE-2021-47660

Mitre link : CVE-2021-47660

CVE.ORG link : CVE-2021-47660

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime