PT-2024-11461

CVE-2021-47467

·

Published

2021-09-09

·

Updated

2024-11-05

Description by

CVSS 3.1
5.3
Medium
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is a reference count leak in the kfree at end function of the Linux kernel. This occurs when the kunit alloc and get resource function is invoked, causing the returned resource object's refcount to increase without being handled, resulting in a refcount leak. The problem can be fixed by calling kunit alloc resource instead of kunit alloc and get resource.
Recommendations To resolve the issue, call kunit alloc resource instead of kunit alloc and get resource when invoking the kfree at end function. As a temporary workaround, consider disabling the kunit alloc and get resource function until a patch is available.
Exploitability
Fix
Researchers
Vendors
Affected products
Related identifiers
OPENSUSE-SU-2024_2189-1
SUSE-SU-2024:2008-1
SUSE-SU-2024:2011-1
SUSE-SU-2024:2019-1
SUSE-SU-2024:2189-1
SUSE-SU-2024:2190-1
Found an issue in the description? Have something to add? Feel free to write us 👾