CVE-2021-47438
published 2024-05-22CVE-2021-47438: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path Prior to this patch in case…
PriorityP418medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.23%
14.2th percentile
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path
Prior to this patch in case mlx5_core_destroy_cq() failed it returns
without completing all destroy operations and that leads to memory leak.
Instead, complete the destroy flow before return error.
Also move mlx5_debug_cq_remove() to the beginning of mlx5_core_destroy_cq()
to be symmetrical with mlx5_core_create_cq().
kmemleak complains on:
unreferenced object 0xc000000038625100 (size 64):
comm "ethtool", pid 28301, jiffies 4298062946 (age 785.380s)
hex dump (first 32 bytes):
60 01 48 94 00 00 00 c0 b8 05 34 c3 00 00 00 c0 `.H.......4.....
02 00 00 00 00 00 00 00 00 db 7d c1 00 00 00 c0 ..........}.....
backtrace:
[] add_res_tree+0xd0/0x270 [mlx5_core]
[] mlx5_debug_cq_add+0x5c/0xc0 [mlx5_core]
[] mlx5_core_create_cq+0x1d0/0x2d0 [mlx5_core]
[] mlx5e_create_cq+0x210/0x3f0 [mlx5_core]
[] mlx5e_open_cq+0xb4/0x130 [mlx5_core]
[] mlx5e_ptp_open+0x7f4/0xe10 [mlx5_core]
[] mlx5e_open_channels+0x9cc/0x13e0 [mlx5_core]
[] mlx5e_switch_priv_channels+0xa4/0x230
[mlx5_core]
[] mlx5e_safe_switch_params+0x14c/0x300
[mlx5_core]
[] set_pflag_tx_port_ts+0x9c/0x160 [mlx5_core]
[] mlx5e_set_priv_flags+0xd0/0x1b0 [mlx5_core]
[] ethnl_set_privflags+0x234/0x2d0
[] genl_family_rcv_msg_doit+0x108/0x1d0
[] genl_family_rcv_msg+0xe4/0x1f0
[] genl_rcv_msg+0x78/0x120
[] netlink_rcv_skb+0x74/0x1a0
Affected
16 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.14.16-1 (bookworm) | linux 5.14.16-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= e126ba97dba9edeb6fafa3665b5f8497fc9cdf8c < 4f7bddf8c5c01cac74373443b13a68e1c6723a94 | 4f7bddf8c5c01cac74373443b13a68e1c6723a94 |
| linux | linux | >= e126ba97dba9edeb6fafa3665b5f8497fc9cdf8c < ed8aafea4fec9c654e63445236e0b505e27ed3a7 | ed8aafea4fec9c654e63445236e0b505e27ed3a7 |
| linux | linux | >= e126ba97dba9edeb6fafa3665b5f8497fc9cdf8c < 94b960b9deffc02fc0747afc01f72cc62ab099e3 | 94b960b9deffc02fc0747afc01f72cc62ab099e3 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.84-1 | 5.10.84-1 |
| linux | linux_kernel | >= 0 < 5.14.16-1 | 5.14.16-1 |
| linux | linux_kernel | >= 0 < 5.14.16-1 | 5.14.16-1 |
| linux | linux_kernel | >= 0 < 5.14.16-1 | 5.14.16-1 |
| linux | linux_kernel | >= 3.11 < 5.10.75 | 5.10.75 |
| linux | linux_kernel | >= 5.11 < 5.14.14 | 5.14.14 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-24vw-fq64-647q: In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path
Prior to this pa
ghsa_unreviewed·2024-05-22
CVE-2021-47438 [MEDIUM] CWE-401 GHSA-24vw-fq64-647q: In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path
Prior to this pa
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path
Prior to this patch in case mlx5_core_destroy_cq() failed it returns
without completing all destroy operations and that leads to memory leak.
Instead, complete the destroy flow before return error.
Also move mlx5_debug_cq_remove() to the beginning of mlx5_core_destroy_cq()
to be symmetrical with mlx5_core_create_cq().
kmemleak complains on:
unreferenced object 0xc000000038625100 (size 64):
comm "ethtool", pid 28301, jiffies 4298062946 (age 785.380s)
hex dump (first 32 bytes):
60 01 48 94 00 00 00 c0 b8 05 34 c3 00 00 00 c0 `.H.......4.....
02 00 00 00 00 00 00 00 00 db 7d c1 00 00 00 c0 ..........}.....
backtrace:
[] add_res_tree+0xd0/0x270 [mlx5_core]
[]
OSV
CVE-2021-47438: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path Prior to this patc
osv·2024-05-22·CVSS 5.5
CVE-2021-47438 [MEDIUM] CVE-2021-47438: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path Prior to this patc
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path Prior to this patch in case mlx5_core_destroy_cq() failed it returns without completing all destroy operations and that leads to memory leak. Instead, complete the destroy flow before return error. Also move mlx5_debug_cq_remove() to the beginning of mlx5_core_destroy_cq() to be symmetrical with mlx5_core_create_cq(). kmemleak complains on: unreferenced object 0xc000000038625100 (size 64): comm "ethtool", pid 28301, jiffies 4298062946 (age 785.380s) hex dump (first 32 bytes): 60 01 48 94 00 00 00 c0 b8 05 34 c3 00 00 00 c0 `.H.......4..... 02 00 00 00 00 00 00 00 00 db 7d c1 00 00 00 c0 ..........}..... backtrace: [] add_res_tree+0xd0/0x270 [mlx5_core] [] mlx5
Red Hat
kernel: net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path
vendor_redhat·2024-05-22·CVSS 5.5
CVE-2021-47438 [MEDIUM] CWE-833 kernel: net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path
kernel: net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path
Prior to this patch in case mlx5_core_destroy_cq() failed it returns
without completing all destroy operations and that leads to memory leak.
Instead, complete the destroy flow before return error.
Also move mlx5_debug_cq_remove() to the beginning of mlx5_core_destroy_cq()
to be symmetrical with mlx5_core_create_cq().
kmemleak complains on:
unreferenced object 0xc000000038625100 (size 64):
comm "ethtool", pid 28301, jiffies 4298062946 (age 785.380s)
hex dump (first 32 bytes):
60 01 48 94 00 00 00 c0 b8 05 34 c3 00 00 00 c0 `.H.......4.....
02 00 00 00 00 00 00 00 00 db 7d c1 00 00 00 c0 .
Debian
CVE-2021-47438: linux - In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: ...
vendor_debian·2021·CVSS 5.5
CVE-2021-47438 [MEDIUM] CVE-2021-47438: linux - In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: ...
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path Prior to this patch in case mlx5_core_destroy_cq() failed it returns without completing all destroy operations and that leads to memory leak. Instead, complete the destroy flow before return error. Also move mlx5_debug_cq_remove() to the beginning of mlx5_core_destroy_cq() to be symmetrical with mlx5_core_create_cq(). kmemleak complains on: unreferenced object 0xc000000038625100 (size 64): comm "ethtool", pid 28301, jiffies 4298062946 (age 785.380s) hex dump (first 32 bytes): 60 01 48 94 00 00 00 c0 b8 05 34 c3 00 00 00 c0 `.H.......4..... 02 00 00 00 00 00 00 00 00 db 7d c1 00 00 00 c0 ..........}..... backtrace: [] add_res_tree+0xd0/0x270 [mlx5_core] [] mlx5
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/4f7bddf8c5c01cac74373443b13a68e1c6723a94https://git.kernel.org/stable/c/94b960b9deffc02fc0747afc01f72cc62ab099e3https://git.kernel.org/stable/c/ed8aafea4fec9c654e63445236e0b505e27ed3a7https://git.kernel.org/stable/c/4f7bddf8c5c01cac74373443b13a68e1c6723a94https://git.kernel.org/stable/c/94b960b9deffc02fc0747afc01f72cc62ab099e3https://git.kernel.org/stable/c/ed8aafea4fec9c654e63445236e0b505e27ed3a7
2024-05-22
Published