Riskcovery

CVE-2021-47403

ipack: ipoctal: fix module reference leak

State
Published
Severity
7.1 High
Published
May 21, 2024
Updated
May 11, 2026
Reserved
May 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ipack: ipoctal: fix module reference leak

A reference to the carrier module was taken on every open but was only released once when the final reference to the tty struct was dropped.

Fix this by taking the module reference and initialising the tty driver data when installing the tty.

Scores

CVSSScoreVectorSource
3.17.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:HCISA-ADP

Weaknesses

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

Affected Products

ProductVersions
LinuxLinux
  • 82a82340bab6c251e0705339f60763718eaa2a22 to before 31398849b84ebae0d43a1cf379cb9895597f221aAffected
  • 82a82340bab6c251e0705339f60763718eaa2a22 to before c0adb5a947dec6cff7050ec56d78ecd3916f9ce6Affected
  • 82a82340bab6c251e0705339f60763718eaa2a22 to before dde4c1429b97383689f755ce92b4ed1e84a9c92bAffected
  • 82a82340bab6c251e0705339f60763718eaa2a22 to before 9c5b77a7ffc983b2429ce158b50497c5d3c86a69Affected
  • 82a82340bab6c251e0705339f60763718eaa2a22 to before 3253c87e1e5bc0107aab773af2f135ebccf38666Affected
  • 82a82340bab6c251e0705339f60763718eaa2a22 to before 7cea848678470daadbfdaa6a112b823c290f900cAffected
  • 82a82340bab6c251e0705339f60763718eaa2a22 to before 811178f296b16af30264def74c8d2179a72d5562Affected
  • 82a82340bab6c251e0705339f60763718eaa2a22 to before bb8a4fcb2136508224c596a7e665bdba1d7c3c27Affected
LinuxLinux
  • 3.18Affected
  • before 3.18Not affected
  • 4.4.286 through 4.4.*Not affected
  • 4.9.285 through 4.9.*Not affected
  • 4.14.249 through 4.14.*Not affected
  • 4.19.209 through 4.19.*Not affected
  • 5.4.151 through 5.4.*Not affected
  • 5.10.71 through 5.10.*Not affected
  • 5.14.10 through 5.14.*Not affected
  • 5.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.