CVE-2021-47438
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
22/05/2024
Last modified:
07/01/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path<br />
<br />
Prior to this patch in case mlx5_core_destroy_cq() failed it returns<br />
without completing all destroy operations and that leads to memory leak.<br />
Instead, complete the destroy flow before return error.<br />
<br />
Also move mlx5_debug_cq_remove() to the beginning of mlx5_core_destroy_cq()<br />
to be symmetrical with mlx5_core_create_cq().<br />
<br />
kmemleak complains on:<br />
<br />
unreferenced object 0xc000000038625100 (size 64):<br />
comm "ethtool", pid 28301, jiffies 4298062946 (age 785.380s)<br />
hex dump (first 32 bytes):<br />
60 01 48 94 00 00 00 c0 b8 05 34 c3 00 00 00 c0 `.H.......4.....<br />
02 00 00 00 00 00 00 00 00 db 7d c1 00 00 00 c0 ..........}.....<br />
backtrace:<br />
[] add_res_tree+0xd0/0x270 [mlx5_core]<br />
[] mlx5_debug_cq_add+0x5c/0xc0 [mlx5_core]<br />
[] mlx5_core_create_cq+0x1d0/0x2d0 [mlx5_core]<br />
[] mlx5e_create_cq+0x210/0x3f0 [mlx5_core]<br />
[] mlx5e_open_cq+0xb4/0x130 [mlx5_core]<br />
[] mlx5e_ptp_open+0x7f4/0xe10 [mlx5_core]<br />
[] mlx5e_open_channels+0x9cc/0x13e0 [mlx5_core]<br />
[] mlx5e_switch_priv_channels+0xa4/0x230<br />
[mlx5_core]<br />
[] mlx5e_safe_switch_params+0x14c/0x300<br />
[mlx5_core]<br />
[] set_pflag_tx_port_ts+0x9c/0x160 [mlx5_core]<br />
[] mlx5e_set_priv_flags+0xd0/0x1b0 [mlx5_core]<br />
[] ethnl_set_privflags+0x234/0x2d0<br />
[] genl_family_rcv_msg_doit+0x108/0x1d0<br />
[] genl_family_rcv_msg+0xe4/0x1f0<br />
[] genl_rcv_msg+0x78/0x120<br />
[] netlink_rcv_skb+0x74/0x1a0
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 3.11 (including) | 5.10.75 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.11 (including) | 5.14.14 (excluding) |
| cpe:2.3:o:linux:linux_kernel:5.15:rc1:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:5.15:rc2:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:5.15:rc3:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:5.15:rc4:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:5.15:rc5:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- https://git.kernel.org/stable/c/4f7bddf8c5c01cac74373443b13a68e1c6723a94
- https://git.kernel.org/stable/c/94b960b9deffc02fc0747afc01f72cc62ab099e3
- https://git.kernel.org/stable/c/ed8aafea4fec9c654e63445236e0b505e27ed3a7
- https://git.kernel.org/stable/c/4f7bddf8c5c01cac74373443b13a68e1c6723a94
- https://git.kernel.org/stable/c/94b960b9deffc02fc0747afc01f72cc62ab099e3
- https://git.kernel.org/stable/c/ed8aafea4fec9c654e63445236e0b505e27ed3a7



