Riskcovery

CVE-2021-47367

virtio-net: fix pages leaking when building skb in big mode

State
Published
Severity
5.5 Medium
Published
May 21, 2024
Updated
May 11, 2026
Reserved
May 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

virtio-net: fix pages leaking when building skb in big mode

We try to use build_skb() if we had sufficient tailroom. But we forget to release the unused pages chained via private in big mode which will leak pages. Fixing this by release the pages after building the skb in big mode.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NCISA-ADP

Weaknesses

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected Products

ProductVersions
LinuxLinux
  • fb32856b16ad9d5bcd75b76a274e2c515ac7b9d7 to before f020bb63b5d2e5576acadd10e158fe3b04af67baAffected
  • fb32856b16ad9d5bcd75b76a274e2c515ac7b9d7 to before afd92d82c9d715fb97565408755acad81573591aAffected
LinuxLinux
  • 5.13Affected
  • before 5.13Not affected
  • 5.14.9 through 5.14.*Not affected
  • 5.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.