CVE-2021-47320 - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: nfs: fix acl memory leak of posix_acl_create() When looking into another nfs xfstests report, I found acl and default_acl in nfs3_proc_create() and nfs3_proc_mknod() error paths are possibly leaked. Fix them in advance.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact Low

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/0704f617040c397ae73c1f88f3956787ec5d6529
https://git.kernel.org/stable/c/1fcb6fcd74a222d9ead54d405842fc763bb86262
https://git.kernel.org/stable/c/2e3960f276b4574a9bb0dfa31a7497302f6363b2
https://git.kernel.org/stable/c/4b515308ab875c7e8ada8e606fe0c64762da5ed4
https://git.kernel.org/stable/c/687cf32865b2d6960214bce523f2afac58dd3cd2
https://git.kernel.org/stable/c/8a2b308a54c5ec224fedc753617f99b29ffcd883
https://git.kernel.org/stable/c/c8fc86e9df6a6a03f5a8e15a3b7a5c75fd05aa38
https://git.kernel.org/stable/c/cef9d9acb7c80ed6bace894b6334557fd493863b
https://git.kernel.org/stable/c/d0b32dc1409f7e65e4fcc34e236462268e69a357
https://lore.kernel.org/linux-cve-announce/2024052131-CVE-2021-47320-9a42@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2021-47320
https://www.cve.org/CVERecord?id=CVE-2021-47320

History

No history.

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-05-21T14:35:35.205Z

Updated: 2024-11-04T12:03:38.133Z

Reserved: 2024-05-21T14:28:16.974Z

Link: CVE-2021-47320

Vulnrichment

Updated: 2024-08-04T05:32:08.358Z

NVD

Status : Awaiting Analysis

Published: 2024-05-21T15:15:19.220

Modified: 2024-05-21T16:54:26.047

Link: CVE-2021-47320

Redhat

Severity : Low

Publid Date: 2024-05-21T00:00:00Z

Links: CVE-2021-47320 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2021-47320", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-05-21T14:28:16.974Z", "datePublished": "2024-05-21T14:35:35.205Z", "dateUpdated": "2024-11-04T12:03:38.133Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-11-04T12:03:38.133Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfs: fix acl memory leak of posix_acl_create()\n\nWhen looking into another nfs xfstests report, I found acl and\ndefault_acl in nfs3_proc_create() and nfs3_proc_mknod() error\npaths are possibly leaked. Fix them in advance."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/nfs/nfs3proc.c"], "versions": [{"version": "013cdf1088d7", "lessThan": "2e3960f276b4", "status": "affected", "versionType": "git"}, {"version": "013cdf1088d7", "lessThan": "cef9d9acb7c8", "status": "affected", "versionType": "git"}, {"version": "013cdf1088d7", "lessThan": "8a2b308a54c5", "status": "affected", "versionType": "git"}, {"version": "013cdf1088d7", "lessThan": "0704f617040c", "status": "affected", "versionType": "git"}, {"version": "013cdf1088d7", "lessThan": "d0b32dc1409f", "status": "affected", "versionType": "git"}, {"version": "013cdf1088d7", "lessThan": "4b515308ab87", "status": "affected", "versionType": "git"}, {"version": "013cdf1088d7", "lessThan": "c8fc86e9df6a", "status": "affected", "versionType": "git"}, {"version": "013cdf1088d7", "lessThan": "687cf32865b2", "status": "affected", "versionType": "git"}, {"version": "013cdf1088d7", "lessThan": "1fcb6fcd74a2", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/nfs/nfs3proc.c"], "versions": [{"version": "3.14", "status": "affected"}, {"version": "0", "lessThan": "3.14", "status": "unaffected", "versionType": "semver"}, {"version": "4.4.276", "lessThanOrEqual": "4.4.*", "status": "unaffected", "versionType": "semver"}, {"version": "4.9.276", "lessThanOrEqual": "4.9.*", "status": "unaffected", "versionType": "semver"}, {"version": "4.14.240", "lessThanOrEqual": "4.14.*", "status": "unaffected", "versionType": "semver"}, {"version": "4.19.198", "lessThanOrEqual": "4.19.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.4.134", "lessThanOrEqual": "5.4.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.52", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.12.19", "lessThanOrEqual": "5.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.13.4", "lessThanOrEqual": "5.13.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.14", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/2e3960f276b4574a9bb0dfa31a7497302f6363b2"}, {"url": "https://git.kernel.org/stable/c/cef9d9acb7c80ed6bace894b6334557fd493863b"}, {"url": "https://git.kernel.org/stable/c/8a2b308a54c5ec224fedc753617f99b29ffcd883"}, {"url": "https://git.kernel.org/stable/c/0704f617040c397ae73c1f88f3956787ec5d6529"}, {"url": "https://git.kernel.org/stable/c/d0b32dc1409f7e65e4fcc34e236462268e69a357"}, {"url": "https://git.kernel.org/stable/c/4b515308ab875c7e8ada8e606fe0c64762da5ed4"}, {"url": "https://git.kernel.org/stable/c/c8fc86e9df6a6a03f5a8e15a3b7a5c75fd05aa38"}, {"url": "https://git.kernel.org/stable/c/687cf32865b2d6960214bce523f2afac58dd3cd2"}, {"url": "https://git.kernel.org/stable/c/1fcb6fcd74a222d9ead54d405842fc763bb86262"}], "title": "nfs: fix acl memory leak of posix_acl_create()", "x_generator": {"engine": "bippy-9e1c9544281a"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2021-47320", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-05-23T18:03:03.158182Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:13:50.818Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T05:32:08.358Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/2e3960f276b4574a9bb0dfa31a7497302f6363b2", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/cef9d9acb7c80ed6bace894b6334557fd493863b", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/8a2b308a54c5ec224fedc753617f99b29ffcd883", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/0704f617040c397ae73c1f88f3956787ec5d6529", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/d0b32dc1409f7e65e4fcc34e236462268e69a357", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/4b515308ab875c7e8ada8e606fe0c64762da5ed4", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/c8fc86e9df6a6a03f5a8e15a3b7a5c75fd05aa38", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/687cf32865b2d6960214bce523f2afac58dd3cd2", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/1fcb6fcd74a222d9ead54d405842fc763bb86262", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/2e3960f276b4574a9bb0dfa31a7497302f6363b2", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/cef9d9acb7c80ed6bace894b6334557fd493863b", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/8a2b308a54c5ec224fedc753617f99b29ffcd883", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/0704f617040c397ae73c1f88f3956787ec5d6529", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/d0b32dc1409f7e65e4fcc34e236462268e69a357", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/4b515308ab875c7e8ada8e606fe0c64762da5ed4", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/c8fc86e9df6a6a03f5a8e15a3b7a5c75fd05aa38", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/687cf32865b2d6960214bce523f2afac58dd3cd2", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/1fcb6fcd74a222d9ead54d405842fc763bb86262", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T05:32:08.358Z"}}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2021-47320", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-05-23T18:03:03.158182Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-23T18:03:07.031Z"}, "title": "CISA ADP Vulnrichment"}], "cna": {"title": "nfs: fix acl memory leak of posix_acl_create()", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "013cdf1088d7", "lessThan": "2e3960f276b4", "versionType": "git"}, {"status": "affected", "version": "013cdf1088d7", "lessThan": "cef9d9acb7c8", "versionType": "git"}, {"status": "affected", "version": "013cdf1088d7", "lessThan": "8a2b308a54c5", "versionType": "git"}, {"status": "affected", "version": "013cdf1088d7", "lessThan": "0704f617040c", "versionType": "git"}, {"status": "affected", "version": "013cdf1088d7", "lessThan": "d0b32dc1409f", "versionType": "git"}, {"status": "affected", "version": "013cdf1088d7", "lessThan": "4b515308ab87", "versionType": "git"}, {"status": "affected", "version": "013cdf1088d7", "lessThan": "c8fc86e9df6a", "versionType": "git"}, {"status": "affected", "version": "013cdf1088d7", "lessThan": "687cf32865b2", "versionType": "git"}, {"status": "affected", "version": "013cdf1088d7", "lessThan": "1fcb6fcd74a2", "versionType": "git"}], "programFiles": ["fs/nfs/nfs3proc.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "3.14"}, {"status": "unaffected", "version": "0", "lessThan": "3.14", "versionType": "custom"}, {"status": "unaffected", "version": "4.4.276", "versionType": "custom", "lessThanOrEqual": "4.4.*"}, {"status": "unaffected", "version": "4.9.276", "versionType": "custom", "lessThanOrEqual": "4.9.*"}, {"status": "unaffected", "version": "4.14.240", "versionType": "custom", "lessThanOrEqual": "4.14.*"}, {"status": "unaffected", "version": "4.19.198", "versionType": "custom", "lessThanOrEqual": "4.19.*"}, {"status": "unaffected", "version": "5.4.134", "versionType": "custom", "lessThanOrEqual": "5.4.*"}, {"status": "unaffected", "version": "5.10.52", "versionType": "custom", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.12.19", "versionType": "custom", "lessThanOrEqual": "5.12.*"}, {"status": "unaffected", "version": "5.13.4", "versionType": "custom", "lessThanOrEqual": "5.13.*"}, {"status": "unaffected", "version": "5.14", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["fs/nfs/nfs3proc.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/2e3960f276b4574a9bb0dfa31a7497302f6363b2"}, {"url": "https://git.kernel.org/stable/c/cef9d9acb7c80ed6bace894b6334557fd493863b"}, {"url": "https://git.kernel.org/stable/c/8a2b308a54c5ec224fedc753617f99b29ffcd883"}, {"url": "https://git.kernel.org/stable/c/0704f617040c397ae73c1f88f3956787ec5d6529"}, {"url": "https://git.kernel.org/stable/c/d0b32dc1409f7e65e4fcc34e236462268e69a357"}, {"url": "https://git.kernel.org/stable/c/4b515308ab875c7e8ada8e606fe0c64762da5ed4"}, {"url": "https://git.kernel.org/stable/c/c8fc86e9df6a6a03f5a8e15a3b7a5c75fd05aa38"}, {"url": "https://git.kernel.org/stable/c/687cf32865b2d6960214bce523f2afac58dd3cd2"}, {"url": "https://git.kernel.org/stable/c/1fcb6fcd74a222d9ead54d405842fc763bb86262"}], "x_generator": {"engine": "bippy-a5840b7849dd"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfs: fix acl memory leak of posix_acl_create()\n\nWhen looking into another nfs xfstests report, I found acl and\ndefault_acl in nfs3_proc_create() and nfs3_proc_mknod() error\npaths are possibly leaked. Fix them in advance."}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-05-29T05:05:54.449Z"}}}, "cveMetadata": {"cveId": "CVE-2021-47320", "state": "PUBLISHED", "dateUpdated": "2024-08-04T05:32:08.358Z", "dateReserved": "2024-05-21T14:28:16.974Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-05-21T14:35:35.205Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}