cbcvebase.
CVE-2021-47539
published 2024-05-24

CVE-2021-47539: In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle() Need to call rxrpc_put_peer() for…

PriorityP418medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.22%
12.8th percentile
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle() Need to call rxrpc_put_peer() for bundle candidate before kfree() as it holds a ref to rxrpc_peer. [DH: v2: Changed to abstract out the bundle freeing code into a function]

Affected

12 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 5.15.15-1 (bookworm)linux 5.15.15-1 (bookworm)
linuxlinux——
linuxlinux>= 245500d853e9f20036cec7df4f6984ece4c6bf26 < 35b40f724c4ef0f683d94dab3af9ab38261d782b35b40f724c4ef0f683d94dab3af9ab38261d782b
linuxlinux>= 245500d853e9f20036cec7df4f6984ece4c6bf26 < bc97458620e38961af9505cc060ad4cf5c9e4af7bc97458620e38961af9505cc060ad4cf5c9e4af7
linuxlinux>= 245500d853e9f20036cec7df4f6984ece4c6bf26 < ca77fba821351190777b236ce749d7c4d353102eca77fba821351190777b236ce749d7c4d353102e
linuxlinux_kernel——
linuxlinux_kernel>= 0 < 5.10.84-15.10.84-1
linuxlinux_kernel>= 0 < 5.15.15-15.15.15-1
linuxlinux_kernel>= 0 < 5.15.15-15.15.15-1
linuxlinux_kernel>= 0 < 5.15.15-15.15.15-1
linuxlinux_kernel>= 5.10 < 5.10.845.10.84
linuxlinux_kernel>= 5.11 < 5.15.75.15.7

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.