CVE-2021-47539

Description

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle() Need to call rxrpc_put_peer() for bundle candidate before kfree() as it holds a ref to rxrpc_peer. [DH: v2: Changed to abstract out the bundle freeing code into a function]

Reserved 2024-05-24 | Published 2024-05-24 | Updated 2025-05-04 | Assigner Linux

Product status

Default status
unaffected

245500d853e9f20036cec7df4f6984ece4c6bf26 before 35b40f724c4ef0f683d94dab3af9ab38261d782b
affected

245500d853e9f20036cec7df4f6984ece4c6bf26 before bc97458620e38961af9505cc060ad4cf5c9e4af7
affected

245500d853e9f20036cec7df4f6984ece4c6bf26 before ca77fba821351190777b236ce749d7c4d353102e
affected

Default status
affected

5.10
affected

Any version before 5.10
unaffected

5.10.84
unaffected

5.15.7
unaffected

5.16
unaffected

References

git.kernel.org/...c/35b40f724c4ef0f683d94dab3af9ab38261d782b

git.kernel.org/...c/bc97458620e38961af9505cc060ad4cf5c9e4af7

git.kernel.org/...c/ca77fba821351190777b236ce749d7c4d353102e

cve.org (CVE-2021-47539)

nvd.nist.gov (CVE-2021-47539)

Download JSON