CVE-2021-47295
See a problem?- Source
- https://nvd.nist.gov/vuln/detail/CVE-2021-47295
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-47295.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2021-47295
- Related
- Published
- 2024-05-21T15:15:17Z
- Modified
- 2024-09-18T03:17:24.813186Z
- Summary
- [none]
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
net: sched: fix memory leak in tcindexpartialdestroy_work
Syzbot reported memory leak in tcindexsetparms(). The problem was in non-freed perfect hash in tcindexpartialdestroy_work().
In tcindexsetparms() new tcindexdata is allocated and some fields from old one are copied to new one, but not the perfect hash. Since tcindexpartialdestroywork() is the destroy function for old tcindex_data, we need to free perfect hash to avoid memory leak.
- References
-
- https://git.kernel.org/stable/c/8d7924ce85bae64e7a67c366c7c50840f49f3a62
- https://git.kernel.org/stable/c/8e9662fde6d63c78eb1350f6167f64c9d71a865b
- https://git.kernel.org/stable/c/cac71d27745f92ee13f0ecc668ffe151a4a9c9b1
- https://git.kernel.org/stable/c/f5051bcece50140abd1a11a2d36dc3ec5484fc32
- https://security-tracker.debian.org/tracker/CVE-2021-47295
Affected packages
Debian:11 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source
Debian:12 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source
Debian:13 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source