CVE-2021-47122
published 2024-03-15CVE-2021-47122: In the Linux kernel, the following vulnerability has been resolved: net: caif: fix memory leak in caif_device_notify In case of caif_enroll_dev() fail…
PriorityP417medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.23%
13.7th percentile
In the Linux kernel, the following vulnerability has been resolved:
net: caif: fix memory leak in caif_device_notify
In case of caif_enroll_dev() fail, allocated
link_support won't be assigned to the corresponding
structure. So simply free allocated pointer in case
of error
Affected
24 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.10.46-1 (bookworm) | linux 5.10.46-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 7c18d2205ea76eef9674e59e1ecae4f332a53e9e < b042e2b2039565eb8f0eb51c14fbe1ef463c8cd8 | b042e2b2039565eb8f0eb51c14fbe1ef463c8cd8 |
| linux | linux | >= 7c18d2205ea76eef9674e59e1ecae4f332a53e9e < 9348c1f10932f13b299cbc8b1bd5f780751fae49 | 9348c1f10932f13b299cbc8b1bd5f780751fae49 |
| linux | linux | >= 7c18d2205ea76eef9674e59e1ecae4f332a53e9e < 4bca2034b41c15b62d47a19158bb76235fd4455d | 4bca2034b41c15b62d47a19158bb76235fd4455d |
| linux | linux | >= 7c18d2205ea76eef9674e59e1ecae4f332a53e9e < 3be863c11cab725add9fef4237ed4e232c3fc3bb | 3be863c11cab725add9fef4237ed4e232c3fc3bb |
| linux | linux | >= 7c18d2205ea76eef9674e59e1ecae4f332a53e9e < f52f4fd67264c70cd0b4ba326962ebe12d9cba94 | f52f4fd67264c70cd0b4ba326962ebe12d9cba94 |
| linux | linux | >= 7c18d2205ea76eef9674e59e1ecae4f332a53e9e < af2806345a37313f01b1c9f15e046745b8ee2daa | af2806345a37313f01b1c9f15e046745b8ee2daa |
| linux | linux | >= 7c18d2205ea76eef9674e59e1ecae4f332a53e9e < 6a0e317f61094d377335547e015dd2ff12caf893 | 6a0e317f61094d377335547e015dd2ff12caf893 |
| linux | linux | >= 7c18d2205ea76eef9674e59e1ecae4f332a53e9e < b53558a950a89824938e9811eddfc8efcd94e1bb | b53558a950a89824938e9811eddfc8efcd94e1bb |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.46-1 | 5.10.46-1 |
| linux | linux_kernel | >= 0 < 5.10.46-1 | 5.10.46-1 |
| linux | linux_kernel | >= 0 < 5.10.46-1 | 5.10.46-1 |
| linux | linux_kernel | >= 0 < 5.10.46-1 | 5.10.46-1 |
| linux | linux_kernel | >= 0 < 3.13.0-205.256 | 3.13.0-205.256 |
| linux | linux_kernel | >= 0 < 4.4.0-267.301 | 4.4.0-267.301 |
| linux | linux_kernel | >= 3.3 < 4.4.272 | 4.4.272 |
| linux | linux_kernel | >= 4.10 < 4.14.236 | 4.14.236 |
| linux | linux_kernel | >= 4.15 < 4.19.194 | 4.19.194 |
| linux | linux_kernel | >= 4.20 < 5.4.125 | 5.4.125 |
| linux | linux_kernel | >= 4.5 < 4.9.272 | 4.9.272 |
| linux | linux_kernel | >= 5.11 < 5.12.10 | 5.12.10 |
| linux | linux_kernel | >= 5.5 < 5.10.43 | 5.10.43 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
vendor_ubuntu5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
Linux kernel vulnerabilities
vendor_ubuntu·2025-04-09·CVSS 5.5
CVE-2024-50302 [MEDIUM] Linux kernel vulnerabilities
Title: Linux kernel vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Drivers core;
- HID subsystem;
- Network drivers;
- SCSI subsystem;
- SuperH / SH-Mobile drivers;
- File systems infrastructure;
- Ext4 file system;
- JFS file system;
- Network file system (NFS) client;
- Memory management;
- Network namespace;
- CAIF protocol;
- Networking core;
- HSR network protocol;
- IPv4 networking;
- IPv6 networking;
- MAC80211 subsystem;
- Network traffic control;
(CVE-2025-21702, CVE-2024-53227, CVE-2024-46826, CVE-2024-49952,
CVE-2024-56600, CVE-2021-47235, CVE-2024-50265, CVE-2021-
Ubuntu
Linux kernel (FIPS) vulnerabilities
vendor_ubuntu·2025-04-09·CVSS 5.5
CVE-2024-50302 [MEDIUM] Linux kernel (FIPS) vulnerabilities
Title: Linux kernel (FIPS) vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Drivers core;
- HID subsystem;
- Network drivers;
- SCSI subsystem;
- SuperH / SH-Mobile drivers;
- File systems infrastructure;
- Ext4 file system;
- JFS file system;
- Network file system (NFS) client;
- Memory management;
- Network namespace;
- CAIF protocol;
- Networking core;
- HSR network protocol;
- IPv4 networking;
- IPv6 networking;
- MAC80211 subsystem;
- Network traffic control;
(CVE-2025-21702, CVE-2024-53227, CVE-2024-46826, CVE-2024-49952,
CVE-2024-56600, CVE-2021-47235, CVE-2024-50265, CV
Ubuntu
Linux kernel vulnerabilities
vendor_ubuntu·2025-04-03·CVSS 5.5
CVE-2021-47119 [MEDIUM] Linux kernel vulnerabilities
Title: Linux kernel vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Drivers core;
- Ext4 file system;
- JFS file system;
- Network namespace;
- CAIF protocol;
- Networking core;
- IPv6 networking;
(CVE-2024-56658, CVE-2021-47119, CVE-2024-56600, CVE-2021-47122,
CVE-2021-47483, CVE-2024-56595)
Instructions: After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modu
Red Hat
kernel: net: caif: fix memory leak in caif_device_notify
vendor_redhat·2024-03-15·CVSS 5.5
CVE-2021-47122 [MEDIUM] CWE-402 kernel: net: caif: fix memory leak in caif_device_notify
kernel: net: caif: fix memory leak in caif_device_notify
In the Linux kernel, the following vulnerability has been resolved:
net: caif: fix memory leak in caif_device_notify
In case of caif_enroll_dev() fail, allocated
link_support won't be assigned to the corresponding
structure. So simply free allocated pointer in case
of error
Package: kernel (Red Hat Enterprise Linux 6) - Out of support scope
Package: kernel (Red Hat Enterprise Linux 7) - Out of support scope
Package: kernel-rt (Red Hat Enterprise Linux 7) - Out of support scope
Package: kernel (Red Hat Enterprise Linux 8) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 8) - Not affected
Package: kernel (Red Hat Enterprise Linux 9) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 9) - Not affected
Debian
CVE-2021-47122: linux - In the Linux kernel, the following vulnerability has been resolved: net: caif: ...
vendor_debian·2021·CVSS 5.5
CVE-2021-47122 [MEDIUM] CVE-2021-47122: linux - In the Linux kernel, the following vulnerability has been resolved: net: caif: ...
In the Linux kernel, the following vulnerability has been resolved: net: caif: fix memory leak in caif_device_notify In case of caif_enroll_dev() fail, allocated link_support won't be assigned to the corresponding structure. So simply free allocated pointer in case of error
Scope: local
bookworm: resolved (fixed in 5.10.46-1)
bullseye: resolved (fixed in 5.10.46-1)
forky: resolved (fixed in 5.10.46-1)
sid: resolved (fixed in 5.10.46-1)
trixie: resolved (fixed in 5.10.46-1)
OSV
linux-fips vulnerabilities
osv·2025-04-09·CVSS 5.5
[MEDIUM] linux-fips vulnerabilities
linux-fips vulnerabilities
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Drivers core;
- HID subsystem;
- Network drivers;
- SCSI subsystem;
- SuperH / SH-Mobile drivers;
- File systems infrastructure;
- Ext4 file system;
- JFS file system;
- Network file system (NFS) client;
- Memory management;
- Network namespace;
- CAIF protocol;
- Networking core;
- HSR network protocol;
- IPv4 networking;
- IPv6 networking;
- MAC80211 subsystem;
- Network traffic control;
(CVE-2025-21702, CVE-2024-53227, CVE-2024-46826, CVE-2024-49952,
CVE-2024-56600, CVE-2021-47235, CVE-2024-50265, CVE-2021-47119,
CVE-2024-53165, CVE-2021-47483, CVE-2024-50302, CVE-2024-56595,
CVE-
OSV
linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities
osv·2025-04-09·CVSS 5.5
[MEDIUM] linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities
linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Drivers core;
- HID subsystem;
- Network drivers;
- SCSI subsystem;
- SuperH / SH-Mobile drivers;
- File systems infrastructure;
- Ext4 file system;
- JFS file system;
- Network file system (NFS) client;
- Memory management;
- Network namespace;
- CAIF protocol;
- Networking core;
- HSR network protocol;
- IPv4 networking;
- IPv6 networking;
- MAC80211 subsystem;
- Network traffic control;
(CVE-2025-21702, CVE-2024-53227, CVE-2024-46826, CVE-2024-49952,
CVE-2024-56600, CVE-2021-47235, CVE-2024-50265, CVE-2021-47119,
CVE-2024-53165, CVE-2021-47483, C
OSV
linux vulnerabilities
osv·2025-04-03·CVSS 5.5
CVE-2024-56658 [MEDIUM] linux vulnerabilities
linux vulnerabilities
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Drivers core;
- Ext4 file system;
- JFS file system;
- Network namespace;
- CAIF protocol;
- Networking core;
- IPv6 networking;
(CVE-2024-56658, CVE-2021-47119, CVE-2024-56600, CVE-2021-47122,
CVE-2021-47483, CVE-2024-56595)
OSV
CVE-2021-47122: In the Linux kernel, the following vulnerability has been resolved: net: caif: fix memory leak in caif_device_notify In case of caif_enroll_dev() fail
osv·2024-03-15·CVSS 5.5
CVE-2021-47122 [MEDIUM] CVE-2021-47122: In the Linux kernel, the following vulnerability has been resolved: net: caif: fix memory leak in caif_device_notify In case of caif_enroll_dev() fail
In the Linux kernel, the following vulnerability has been resolved: net: caif: fix memory leak in caif_device_notify In case of caif_enroll_dev() fail, allocated link_support won't be assigned to the corresponding structure. So simply free allocated pointer in case of error
GHSA
GHSA-p8wh-6xv6-4499: In the Linux kernel, the following vulnerability has been resolved:
net: caif: fix memory leak in caif_device_notify
In case of caif_enroll_dev() fa
ghsa_unreviewed·2024-03-15
CVE-2021-47122 [MEDIUM] CWE-401 GHSA-p8wh-6xv6-4499: In the Linux kernel, the following vulnerability has been resolved:
net: caif: fix memory leak in caif_device_notify
In case of caif_enroll_dev() fa
In the Linux kernel, the following vulnerability has been resolved:
net: caif: fix memory leak in caif_device_notify
In case of caif_enroll_dev() fail, allocated
link_support won't be assigned to the corresponding
structure. So simply free allocated pointer in case
of error
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/3be863c11cab725add9fef4237ed4e232c3fc3bbhttps://git.kernel.org/stable/c/4bca2034b41c15b62d47a19158bb76235fd4455dhttps://git.kernel.org/stable/c/6a0e317f61094d377335547e015dd2ff12caf893https://git.kernel.org/stable/c/9348c1f10932f13b299cbc8b1bd5f780751fae49https://git.kernel.org/stable/c/af2806345a37313f01b1c9f15e046745b8ee2daahttps://git.kernel.org/stable/c/b042e2b2039565eb8f0eb51c14fbe1ef463c8cd8https://git.kernel.org/stable/c/b53558a950a89824938e9811eddfc8efcd94e1bbhttps://git.kernel.org/stable/c/f52f4fd67264c70cd0b4ba326962ebe12d9cba94https://git.kernel.org/stable/c/3be863c11cab725add9fef4237ed4e232c3fc3bbhttps://git.kernel.org/stable/c/4bca2034b41c15b62d47a19158bb76235fd4455dhttps://git.kernel.org/stable/c/6a0e317f61094d377335547e015dd2ff12caf893https://git.kernel.org/stable/c/9348c1f10932f13b299cbc8b1bd5f780751fae49https://git.kernel.org/stable/c/af2806345a37313f01b1c9f15e046745b8ee2daahttps://git.kernel.org/stable/c/b042e2b2039565eb8f0eb51c14fbe1ef463c8cd8https://git.kernel.org/stable/c/b53558a950a89824938e9811eddfc8efcd94e1bbhttps://git.kernel.org/stable/c/f52f4fd67264c70cd0b4ba326962ebe12d9cba94
2024-03-15
Published