CVE-2021-47624

Source
https://nvd.nist.gov/vuln/detail/CVE-2021-47624
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-47624.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-47624
Downstream
Related
Published
2024-07-16T12:15:02Z
Modified
2025-08-09T19:01:28Z
Severity
  • 7.1 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H CVSS Calculator
Summary
[none]
Details

In the Linux kernel, the following vulnerability has been resolved:

net/sunrpc: fix reference count leaks in rpcsysfsxprtstatechange

The refcount leak issues take place in an error handling path. When the 3rd argument buf doesn't match with "offline", "online" or "remove", the function simply returns -EINVAL and forgets to decrease the reference count of a rpcxprt object and a rpcxprtswitch object increased by rpcsysfsxprtkobjgetxprt() and rpcsysfsxprtkobjgetxprtswitch(), causing reference count leaks of both unused objects.

Fix this issue by jumping to the error handling path labelled with out_put when buf matches none of "offline", "online" or "remove".

References

Affected packages