Vulnerability Details : CVE-2021-47467
In the Linux kernel, the following vulnerability has been resolved:
kunit: fix reference count leak in kfree_at_end
The reference counting issue happens in the normal path of
kfree_at_end(). When kunit_alloc_and_get_resource() is invoked, the
function forgets to handle the returned resource object, whose refcount
increased inside, causing a refcount leak.
Fix this issue by calling kunit_alloc_resource() instead of
kunit_alloc_and_get_resource().
Fixed the following when applying:
Shuah Khan <skhan@linuxfoundation.org>
CHECK: Alignment should match open parenthesis
+ kunit_alloc_resource(test, NULL, kfree_res_free, GFP_KERNEL,
(void *)to_free);
Products affected by CVE-2021-47467
Please log in to view affected product information.
Exploit prediction scoring system (EPSS) score for CVE-2021-47467
0.04%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 9 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2021-47467
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
5.3
|
MEDIUM | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L |
3.9
|
1.4
|
134c704f-9b21-4f2e-91b3-4a467353bcc0 | 2024-11-05 |
References for CVE-2021-47467
-
https://git.kernel.org/stable/c/f62314b1ced25c58b86e044fc951cd6a1ea234cf
kunit: fix reference count leak in kfree_at_end - kernel/git/stable/linux.git - Linux kernel stable tree
-
https://git.kernel.org/stable/c/bbdd158b40b66a9403391a517f24ef6613573446
kunit: fix reference count leak in kfree_at_end - kernel/git/stable/linux.git - Linux kernel stable tree
Jump to