Riskcovery

CVE-2021-47345

RDMA/cma: Fix rdma_resolve_route() memory leak

State
Published
Severity
Not scored
Published
May 21, 2024
Updated
May 11, 2026
Reserved
May 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

RDMA/cma: Fix rdma_resolve_route() memory leak

Fix a memory leak when "mda_resolve_route() is called more than once on the same "rdma_cm_id".

This is possible if cma_query_handler() triggers the RDMA_CM_EVENT_ROUTE_ERROR flow which puts the state machine back and allows rdma_resolve_route() to be called again.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • e51060f08a61965c4dd91516d82fe90617152590 to before 40b613db3a95bc27998e4097d74c2f7e5d083a0bAffected
  • e51060f08a61965c4dd91516d82fe90617152590 to before e2da8ce2a9543f3ca5c93369bd1fe6eeb572101aAffected
  • e51060f08a61965c4dd91516d82fe90617152590 to before e4e062da082a199357ba4911145f331d40139ad8Affected
  • e51060f08a61965c4dd91516d82fe90617152590 to before 4893c938f2a140a74be91779e45e4a7fa111198fAffected
  • e51060f08a61965c4dd91516d82fe90617152590 to before 032c68b4f5be128a2167f35b558b7cec88fe4972Affected
  • e51060f08a61965c4dd91516d82fe90617152590 to before 3d08b5917984f737f32d5bee9737b9075c3895c6Affected
  • e51060f08a61965c4dd91516d82fe90617152590 to before f4f553d67236145fa5fd203ed7b35b9377e19939Affected
  • e51060f08a61965c4dd91516d82fe90617152590 to before 07583ba2e2d8947c3d365d97608cb436510885acAffected
  • e51060f08a61965c4dd91516d82fe90617152590 to before 74f160ead74bfe5f2b38afb4fcf86189f9ff40c9Affected
LinuxLinux
  • 2.6.18Affected
  • before 2.6.18Not affected
  • 4.4.276 through 4.4.*Not affected
  • 4.9.276 through 4.9.*Not affected
  • 4.14.240 through 4.14.*Not affected
  • 4.19.198 through 4.19.*Not affected
  • 5.4.133 through 5.4.*Not affected
  • 5.10.51 through 5.10.*Not affected
  • 5.12.18 through 5.12.*Not affected
  • 5.13.3 through 5.13.*Not affected
  • 5.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.