Riskcovery

CVE-2021-47514

devlink: fix netns refcount leak in devlink_nl_cmd_reload()

State
Published
Severity
Not scored
Published
May 24, 2024
Updated
May 11, 2026
Reserved
May 24, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

devlink: fix netns refcount leak in devlink_nl_cmd_reload()

While preparing my patch series adding netns refcount tracking, I spotted bugs in devlink_nl_cmd_reload()

Some error paths forgot to release a refcount on a netns.

To fix this, we can reduce the scope of get_net()/put_net() section around the call to devlink_reload().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • ccdf07219da6bd1f43c6ddcde4c0e36993c7365a to before 4b7e90672af8e0c78205db006f1b0a20ebd07f5fAffected
  • ccdf07219da6bd1f43c6ddcde4c0e36993c7365a to before fe30b70ca84da9c4aca85c03ad86e7a9b89c5dedAffected
  • ccdf07219da6bd1f43c6ddcde4c0e36993c7365a to before 4dbb0dad8e63fcd0b5a117c2861d2abe7ff5f186Affected
LinuxLinux
  • 5.10Affected
  • before 5.10Not affected
  • 5.10.85 through 5.10.*Not affected
  • 5.15.8 through 5.15.*Not affected
  • 5.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.