CVE-2021-47538
published 2024-05-24CVE-2021-47538: In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() Need to call rxrpc_put_local() for peer…
PriorityP418medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.24%
14.5th percentile
In the Linux kernel, the following vulnerability has been resolved:
rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer()
Need to call rxrpc_put_local() for peer candidate before kfree() as it
holds a ref to rxrpc_local.
[DH: v2: Changed to abstract the peer freeing code out into a function]
Affected
21 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.15.15-1 (bookworm) | linux 5.15.15-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | >= 4.19.82 < 4.19.220 | 4.19.220 |
| linux | linux | >= 5.3.9 < 5.4 | 5.4 |
| linux | linux | >= 9ebeddef58c41bd700419cdcece24cf64ce32276 < 3e70e3a72d80b16094faccbe438cd53761c3503a | 3e70e3a72d80b16094faccbe438cd53761c3503a |
| linux | linux | >= 9ebeddef58c41bd700419cdcece24cf64ce32276 < 60f0b9c42cb80833a03ca57c1c8b078d716e71d1 | 60f0b9c42cb80833a03ca57c1c8b078d716e71d1 |
| linux | linux | >= 9ebeddef58c41bd700419cdcece24cf64ce32276 < 9469273e616ca8f1b6e3773c5019f21b4c8d828c | 9469273e616ca8f1b6e3773c5019f21b4c8d828c |
| linux | linux | >= 9ebeddef58c41bd700419cdcece24cf64ce32276 < beacff50edbd6c9659a6f15fc7f6126909fade29 | beacff50edbd6c9659a6f15fc7f6126909fade29 |
| linux | linux | >= e8e51ce79c157188e209e5ea0afaf6b42dd76104 < 913c24af2d13a3fd304462916ee98e298d56bdce | 913c24af2d13a3fd304462916ee98e298d56bdce |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.84-1 | 5.10.84-1 |
| linux | linux_kernel | >= 0 < 5.15.15-1 | 5.15.15-1 |
| linux | linux_kernel | >= 0 < 5.15.15-1 | 5.15.15-1 |
| linux | linux_kernel | >= 0 < 5.15.15-1 | 5.15.15-1 |
| linux | linux_kernel | >= 4.19.82 < 4.19.220 | 4.19.220 |
| linux | linux_kernel | >= 5.11 < 5.15.7 | 5.15.7 |
| linux | linux_kernel | >= 5.3.9 < 5.4 | 5.4 |
| linux | linux_kernel | >= 5.4.1 < 5.4.164 | 5.4.164 |
| linux | linux_kernel | >= 5.5 < 5.10.84 | 5.10.84 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2021-47538: In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() Need to call rxrpc_put_local()
osv·2024-05-24·CVSS 5.5
CVE-2021-47538 [MEDIUM] CVE-2021-47538: In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() Need to call rxrpc_put_local()
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() Need to call rxrpc_put_local() for peer candidate before kfree() as it holds a ref to rxrpc_local. [DH: v2: Changed to abstract the peer freeing code out into a function]
Red Hat
kernel: rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer()
vendor_redhat·2024-05-24·CVSS 5.5
CVE-2021-47538 [MEDIUM] CWE-401 kernel: rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer()
kernel: rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer()
In the Linux kernel, the following vulnerability has been resolved:
rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer()
Need to call rxrpc_put_local() for peer candidate before kfree() as it
holds a ref to rxrpc_local.
[DH: v2: Changed to abstract the peer freeing code out into a function]
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (Red Hat Enterprise Linux 8) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 8) - Not affected
Package: kernel (Red Hat Enterprise Linux 9) - Affected
Package: kernel-rt (Red Hat Enterprise Linux 9) - Affected
Debian
CVE-2021-47538: linux - In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix ...
vendor_debian·2021·CVSS 5.5
CVE-2021-47538 [MEDIUM] CVE-2021-47538: linux - In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix ...
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() Need to call rxrpc_put_local() for peer candidate before kfree() as it holds a ref to rxrpc_local. [DH: v2: Changed to abstract the peer freeing code out into a function]
Scope: local
bookworm: resolved (fixed in 5.15.15-1)
bullseye: resolved (fixed in 5.10.84-1)
forky: resolved (fixed in 5.15.15-1)
sid: resolved (fixed in 5.15.15-1)
trixie: resolved (fixed in 5.15.15-1)
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/3e70e3a72d80b16094faccbe438cd53761c3503ahttps://git.kernel.org/stable/c/60f0b9c42cb80833a03ca57c1c8b078d716e71d1https://git.kernel.org/stable/c/913c24af2d13a3fd304462916ee98e298d56bdcehttps://git.kernel.org/stable/c/9469273e616ca8f1b6e3773c5019f21b4c8d828chttps://git.kernel.org/stable/c/beacff50edbd6c9659a6f15fc7f6126909fade29https://git.kernel.org/stable/c/3e70e3a72d80b16094faccbe438cd53761c3503ahttps://git.kernel.org/stable/c/60f0b9c42cb80833a03ca57c1c8b078d716e71d1https://git.kernel.org/stable/c/913c24af2d13a3fd304462916ee98e298d56bdcehttps://git.kernel.org/stable/c/9469273e616ca8f1b6e3773c5019f21b4c8d828chttps://git.kernel.org/stable/c/beacff50edbd6c9659a6f15fc7f6126909fade29
2024-05-24
Published