CVEvulnerability
CVE-2021-47367
5.5 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2024-05-21
- Last modified
- 2026-06-17
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-119
Description
In the Linux kernel, the following vulnerability has been resolved:
virtio-net: fix pages leaking when building skb in big mode
We try to use build_skb() if we had sufficient tailroom. But we forget
to release the unused pages chained via private in big mode which will
leak pages. Fixing this by release the pages after building the skb in
big mode.
Affected configurations
• linux linux kernel (>= 5.13 < 5.14.9)
• linux linux kernel 5.15
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- https://git.kernel.org/stable/c/afd92d82c9d715fb97565408755acad81573591a Patch
- https://git.kernel.org/stable/c/f020bb63b5d2e5576acadd10e158fe3b04af67ba Patch
- https://git.kernel.org/stable/c/afd92d82c9d715fb97565408755acad81573591a Patch
- https://git.kernel.org/stable/c/f020bb63b5d2e5576acadd10e158fe3b04af67ba Patch