Skip to content
7.5 High

CVE-2021-47295 In the Linux kernel, the following vulnerability has been resolved: net: sched: fix memory leak in…

Description

In the Linux kernel, the following vulnerability has been resolved: net: sched: fix memory leak in tcindex_partial_destroy_work Syzbot reported memory leak in tcindex_set_parms(). The problem was in non-freed perfect hash in tcindex_partial_destroy_work(). In tcindex_set_parms() new tcindex_data is allocated and some fields from old one are copied to new one, but not the perfect hash. Since tcindex_partial_destroy_work() is the destroy function for old tcindex_data, we need to free perfect hash to avoid memory leak.

Affected products and versions

Product Affected versions Fixed in
Linux 6.2 earliest → < 6.2.5 6.2.5
Linux 6.1 earliest → < 6.1.18 6.1.18
Linux 5.15 earliest → < 5.15.100 5.15.100
Linux 5.14 earliest → < 5.14 5.14
Linux 5.13 earliest → < 5.13.6 5.13.6
Linux 5.10 earliest → < 5.10.54 5.10.54
Linux 5.4 earliest → < 5.4.136 5.4.136
Linux 4.19 earliest → < 4.19.276 4.19.276
Linux 4.14 earliest → < 4.14.308 4.14.308
Show the 2 other branches
Product Affected versions Fixed in
Linux 3.18 No fix stated
linux_kernel 5.14 earliest → < 5.14 5.14

References

Timeline

  1. Published
  2. Last modified
The 18283 CVEs of Linux →
Track this CVE