NetSight
medium5.5

CVE-2021-47345

In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Fix rdma_resolve_route() memory leak Fix a memory leak when "mda_resolve_route() …

Impact

In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Fix rdma_resolve_route() memory leak Fix a memory leak when "mda_resolve_route() is called more than once on the same "rdma_cm_id". This is possible if cma_query_handler() triggers the RDMA_CM_EVENT_ROUTE_ERROR flow which puts the state machine back and allows rdma_resolve_route() to be called again.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 4.4.276
from 4.5 before 4.9.276
from 4.10 before 4.14.240
from 4.15 before 4.19.198
from 4.20 before 5.4.133
from 5.5 before 5.10.51

Weakness classification

References