Riskcovery

CVE-2021-47538

rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer()

State
Published
Severity
Not scored
Published
May 24, 2024
Updated
May 23, 2026
Reserved
May 24, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer()

Need to call rxrpc_put_local() for peer candidate before kfree() as it holds a ref to rxrpc_local.

[DH: v2: Changed to abstract the peer freeing code out into a function]

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • e8e51ce79c157188e209e5ea0afaf6b42dd76104 to before 913c24af2d13a3fd304462916ee98e298d56bdceAffected
  • 9ebeddef58c41bd700419cdcece24cf64ce32276 to before 3e70e3a72d80b16094faccbe438cd53761c3503aAffected
  • 9ebeddef58c41bd700419cdcece24cf64ce32276 to before 60f0b9c42cb80833a03ca57c1c8b078d716e71d1Affected
  • 9ebeddef58c41bd700419cdcece24cf64ce32276 to before 9469273e616ca8f1b6e3773c5019f21b4c8d828cAffected
  • 9ebeddef58c41bd700419cdcece24cf64ce32276 to before beacff50edbd6c9659a6f15fc7f6126909fade29Affected
  • 9b7fc03b4cdbfb668b6891967105258691c6d3b5Affected
  • 4.19.82 to before 4.19.220Affected
  • 5.3.9 to before 5.4Affected
LinuxLinux
  • 5.4Affected
  • before 5.4Not affected
  • 4.19.220 through 4.19.*Not affected
  • 5.4.164 through 5.4.*Not affected
  • 5.10.84 through 5.10.*Not affected
  • 5.15.7 through 5.15.*Not affected
  • 5.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.