CVE-2021-47539

rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle()

Published: 5/24/2024 Last updated: 5/4/2025 Reserved: 5/24/2024

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle() Need to call rxrpc_put_peer() for bundle candidate before kfree() as it holds a ref to rxrpc_peer. [DH: v2: Changed to abstract out the bundle freeing code into a function]

CNA assigner: Linux (416baaa9-dc9f-4396-8d5f-8c081fb06d67) Requested by: n/a

Opam packages affected (27)

albatross cdrom conf-bpftool conf-libbpf conf-linux-libc-dev core core_unix hvsock mirage-block-unix mm ocaml-probes orun rawlink rawlink-eio rawlink-lwt shell solo5 solo5-bindings-hvt solo5-bindings-spt solo5-cross-aarch64 solo5-kernel-ukvm tracy-client tuntap uring vhd-format vhd-format-lwt xapi-stdext-unix

Products affected (2)

Product	Vendor	Version
Linux	Linux	< 9.2.4
Linux	Linux	10 Version 1709 for ARM64-based Systems

References (6)

https://git.kernel.org/stable/c/35b40f724c4ef0f683d94dab3af9ab38261d782b
https://git.kernel.org/stable/c/bc97458620e38961af9505cc060ad4cf5c9e4af7
https://git.kernel.org/stable/c/ca77fba821351190777b236ce749d7c4d353102e
https://git.kernel.org/stable/c/35b40f724c4ef0f683d94dab3af9ab38261d782b
https://git.kernel.org/stable/c/bc97458620e38961af9505cc060ad4cf5c9e4af7
https://git.kernel.org/stable/c/ca77fba821351190777b236ce749d7c4d353102e