CVE-2021-47624
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2021-47624
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-47624.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2021-47624
- Downstream
- Related
- Published
- 2024-07-16T12:15:02Z
- Modified
- 2025-05-21T20:00:21Z
- Severity
-
- 7.1 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
net/sunrpc: fix reference count leaks in rpcsysfsxprtstatechange
The refcount leak issues take place in an error handling path. When the 3rd argument buf doesn't match with "offline", "online" or "remove", the function simply returns -EINVAL and forgets to decrease the reference count of a rpcxprt object and a rpcxprtswitch object increased by rpcsysfsxprtkobjgetxprt() and rpcsysfsxprtkobjgetxprtswitch(), causing reference count leaks of both unused objects.
Fix this issue by jumping to the error handling path labelled with out_put when buf matches none of "offline", "online" or "remove".
- References
Affected packages
Debian:12 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source
Debian:13 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source