NetSight
medium5.5

CVE-2021-47538

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() Need to call rxrpc_put_local() for peer …

Impact

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() Need to call rxrpc_put_local() for peer candidate before kfree() as it holds a ref to rxrpc_local. [DH: v2: Changed to abstract the peer freeing code out into a function]

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.19.82 before 4.19.220
from 5.3.9 before 5.4
from 5.4.1 before 5.4.164
from 5.5 before 5.10.84
from 5.11 before 5.15.7
Version 5.4

Weakness classification

References