In the Linux kernel, the following vulnerability has been resolved:

net: rds: fix memory leak in rds_recvmsg

Syzbot reported memory leak in rds. The problem
was in unputted refcount in case of error.

int rds_recvmsg(struct socket *sock, struct msghdr *msg, size_t size,
int msg_flags)
{
...

if (!rds_next_incoming(rs, &inc)) {
...
}

After this "if" inc refcount incremented and

if (rds_cmsg_recv(inc, msg, rs)) {
ret = -EFAULT;
goto out;
}
...
out:
return ret;
}

in case of rds_cmsg_recv() fail the refcount won't be
decremented. And it's easy to see from ftrace log, that
rds_inc_addref() don't have rds_inc_put() pair in
rds_recvmsg() after rds_cmsg_recv()

1) | rds_recvmsg() {
1) 3.721 us | rds_inc_addref();
1) 3.853 us | rds_message_inc_copy_to_user();
1) + 10.395 us | rds_cmsg_recv();
1) + 34.260 us | }

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00008.

Exploitation none

Automatable no

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
bdbe6fbc6a2f2ccfb384b141b257677d2a8d36fb affected < 8c3ec88b03e9e4ca117dcdc4204fd3edcd02084f
bdbe6fbc6a2f2ccfb384b141b257677d2a8d36fb affected < 423c6939758fb3b9cf5abbd1e7792068a5c4ae8c
bdbe6fbc6a2f2ccfb384b141b257677d2a8d36fb affected < 1f79bc8ae81c05eb112a53f981cb2c244ee50d02
bdbe6fbc6a2f2ccfb384b141b257677d2a8d36fb affected < 06b7cb0194bd1ede0dd27f3a946e7c0279fba44a
bdbe6fbc6a2f2ccfb384b141b257677d2a8d36fb affected < 2038cd15eacdf7512755c27686822e0052eb9042
bdbe6fbc6a2f2ccfb384b141b257677d2a8d36fb affected < 5946fbf48355f5a8caeff72580c7658da5966b86
bdbe6fbc6a2f2ccfb384b141b257677d2a8d36fb affected < b25b60d076164edb3025e85aabd2cf50a5215b91
bdbe6fbc6a2f2ccfb384b141b257677d2a8d36fb affected < 49bfcbfd989a8f1f23e705759a6bb099de2cff9f
Linux Linux affected
Version Status Constraints
2.6.30 affected —
0 unaffected < 2.6.30
4.4.274 unaffected ≤ 4.4.*
4.9.274 unaffected ≤ 4.9.*
4.14.238 unaffected ≤ 4.14.*
4.19.196 unaffected ≤ 4.19.*
5.4.128 unaffected ≤ 5.4.*
5.10.46 unaffected ≤ 5.10.*
5.12.13 unaffected ≤ 5.12.*
5.13 unaffected ≤ *

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc6:*:*:*:*:*:*

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/06b7cb0194bd1ede0dd27f3a946e7c0279fba44a cve-icon cve-icon
https://git.kernel.org/stable/c/1f79bc8ae81c05eb112a53f981cb2c244ee50d02 cve-icon cve-icon
https://git.kernel.org/stable/c/2038cd15eacdf7512755c27686822e0052eb9042 cve-icon cve-icon
https://git.kernel.org/stable/c/423c6939758fb3b9cf5abbd1e7792068a5c4ae8c cve-icon cve-icon
https://git.kernel.org/stable/c/49bfcbfd989a8f1f23e705759a6bb099de2cff9f cve-icon cve-icon
https://git.kernel.org/stable/c/5946fbf48355f5a8caeff72580c7658da5966b86 cve-icon cve-icon
https://git.kernel.org/stable/c/8c3ec88b03e9e4ca117dcdc4204fd3edcd02084f cve-icon cve-icon
https://git.kernel.org/stable/c/b25b60d076164edb3025e85aabd2cf50a5215b91 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024052144-CVE-2021-47249-ed65@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2021-47249 cve-icon
https://www.cve.org/CVERecord?id=CVE-2021-47249 cve-icon
History

Mon, 30 Dec 2024 19:30:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses CWE-401
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc6:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
Metrics cvssV3_1

{'score': 6.1, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L'}

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

Mon, 04 Nov 2024 12:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-05-04T07:07:07.809Z

Reserved: 2024-04-10T18:59:19.536Z

Link: CVE-2021-47249

cve-icon Vulnrichment

Updated: 2024-08-04T05:32:07.936Z

cve-icon NVD

Status : Analyzed

Published: 2024-05-21T15:15:13.857

Modified: 2024-12-30T19:01:43.417

Link: CVE-2021-47249

cve-icon Redhat

Severity : Low

Publid Date: 2024-05-21T00:00:00Z

Links: CVE-2021-47249 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses