← CVE Intelligence

CVE-2021-47538

rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() Need to call rxrpc_put_local() for peer candidate before kfree() as it holds a ref to rxrpc_local. [DH: v2: Changed to abstract the peer freeing code out into a function]

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected e8e51ce79c157188e209e5ea0afaf6b42dd76104 before 913c24af2d13a3fd304462916ee98e298d56bdce; affected 9ebeddef58c41bd700419cdcece24cf64ce32276 before 3e70e3a72d80b16094faccbe438cd53761c3503a; affected 9ebeddef58c41bd700419cdcece24cf64ce32276 before 60f0b9c42cb80833a03ca57c1c8b078d716e71d1; affected 9ebeddef58c41bd700419cdcece24cf64ce32276 before 9469273e616ca8f1b6e3773c5019f21b4c8d828c; affected 9ebeddef58c41bd700419cdcece24cf64ce32276 before beacff50edbd6c9659a6f15fc7f6126909fade29; affected 9b7fc03b4cdbfb668b6891967105258691c6d3b5; affected 4.19.82 before 4.19.220; affected 5.3.9 before 5.4
Linux / Linuxaffected 5.4; unaffected 0 before 5.4; unaffected 4.19.220 through 4.19.*; unaffected 5.4.164 through 5.4.*; unaffected 5.10.84 through 5.10.*; unaffected 5.15.7 through 5.15.*; unaffected 5.16 through *

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.