Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: netrom: Decrease sock refcount when sock timers expire Commit 63346650c1a9 ("netrom: switch to sock timer API") switched to use sock timer API. It replaces mod_timer() by sk_reset_timer(), and del_timer() by sk_stop_timer(). Function sk_reset_timer() will increase the refcount of sock if it is called on an inactive timer, hence, in case the timer expires, we need to decrease the refcount ourselves in the handler, otherwise, the sock refcount will be unbalanced and the sock will never be freed.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected ce29e8a259de767f7210d346ad2b031cb8ab2732 before 853262355518cd1247515b74e83fabf038aa6c29; affected baa9e32336bf6d0d74a7c3486d2a27feaf57cd5f before a01634bf91f2b6c42583770eb6815fb6d1e251cf; affected 0adf571fa34b27bd0b97b408cc0f0dc54b72f0eb before 48866fd5c361ea417ed24b43fc2a7dc2f5b060ef; affected 2c6b572458a9127e8070df13fa7f115c29ab1d92 before 9619cc7d97c3aa8ed3cfd2b8678b74fb6d6c7950; affected 63346650c1a94a92be61a57416ac88c0a47c4327 before 25df44e90ff5959b5c24ad361b648504a7e39ef3; affected 63346650c1a94a92be61a57416ac88c0a47c4327 before 6811744bd0efb9e472cb15d066cdb460beb8cb8a; affected 63346650c1a94a92be61a57416ac88c0a47c4327 before bc1660206c3723c37ed4d622ad81781f1e987250; affected 63346650c1a94a92be61a57416ac88c0a47c4327 before 517a16b1a88bdb6b530f48d5d153478b2552d9a8; affected f1d9a1f2ef6ff17293d21d5e6b80e04bea0cf508; affected 519e8a22a454b1f1baa3a151b184fe51bc18e178; affected 4.4.173 before 4.4.277; affected 4.9.155 before 4.9.277; affected 4.14.98 before 4.14.241; affected 4.19.20 before 4.19.199; affected 3.18.134 before 3.19; affected 4.20.7 before 4.21 |
| Linux / Linux | affected 5.0; unaffected 0 before 5.0; unaffected 4.4.277 through 4.4.*; unaffected 4.9.277 through 4.9.*; unaffected 4.14.241 through 4.14.*; unaffected 4.19.199 through 4.19.*; unaffected 5.4.136 through 5.4.*; unaffected 5.10.54 through 5.10.*; unaffected 5.13.6 through 5.13.*; unaffected 5.14 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/853262355518cd1247515b74e83fabf038aa6c29
- https://git.kernel.org/stable/c/a01634bf91f2b6c42583770eb6815fb6d1e251cf
- https://git.kernel.org/stable/c/48866fd5c361ea417ed24b43fc2a7dc2f5b060ef
- https://git.kernel.org/stable/c/9619cc7d97c3aa8ed3cfd2b8678b74fb6d6c7950
- https://git.kernel.org/stable/c/25df44e90ff5959b5c24ad361b648504a7e39ef3
- https://git.kernel.org/stable/c/6811744bd0efb9e472cb15d066cdb460beb8cb8a
- https://git.kernel.org/stable/c/bc1660206c3723c37ed4d622ad81781f1e987250
- https://git.kernel.org/stable/c/517a16b1a88bdb6b530f48d5d153478b2552d9a8
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.
- https://git.kernel.org/stable/c/853262355518cd1247515b74e83fabf038aa6c29
- https://git.kernel.org/stable/c/a01634bf91f2b6c42583770eb6815fb6d1e251cf
- https://git.kernel.org/stable/c/48866fd5c361ea417ed24b43fc2a7dc2f5b060ef
- https://git.kernel.org/stable/c/9619cc7d97c3aa8ed3cfd2b8678b74fb6d6c7950
- https://git.kernel.org/stable/c/25df44e90ff5959b5c24ad361b648504a7e39ef3
- https://git.kernel.org/stable/c/6811744bd0efb9e472cb15d066cdb460beb8cb8a
- https://git.kernel.org/stable/c/bc1660206c3723c37ed4d622ad81781f1e987250
- https://git.kernel.org/stable/c/517a16b1a88bdb6b530f48d5d153478b2552d9a8