PT-2024-11461
CVE-2021-47467
·
تاريخ النشر
2021-09-09
·
تاريخ التحديث
2024-11-05
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is a reference count leak in the kfree at end function of the Linux kernel. This occurs when the kunit alloc and get resource function is invoked, causing the returned resource object's refcount to increase without being handled, resulting in a refcount leak. The problem can be fixed by calling kunit alloc resource instead of kunit alloc and get resource.
Recommendations
To resolve the issue, call kunit alloc resource instead of kunit alloc and get resource when invoking the kfree at end function.
As a temporary workaround, consider disabling the kunit alloc and get resource function until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾