CVE-2021-47472 - Vulnerability Details - OpenCVE

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

No data.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://lore.kernel.org/linux-cve-announce/2024052228-CVE-2021-47472-bd55@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2021-47472
https://www.cve.org/CVERecord?id=CVE-2021-47472

History

Wed, 27 Nov 2024 02:30:00 +0000

Type	Values Removed	Values Added
Metrics	cvssV3_1 `{'score': 5.1, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:L'}` threat_severity `Low`	cvssV3_1 `{'score': 0.0, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:N'}` threat_severity `None`

MITRE

Status: REJECTED

Assigner: Linux

Published: 2024-05-22T06:23:29.555Z

Updated: 2024-06-17T16:15:59.888Z

Reserved: 2024-05-22T06:20:56.199Z

Link: CVE-2021-47472

Vulnrichment

No data.

NVD

Status : Rejected

Published: 2024-05-22T07:15:11.927

Modified: 2024-06-17T17:15:51.050

Link: CVE-2021-47472

Redhat

Severity :

Publid Date: 2024-05-22T00:00:00Z

Links: CVE-2021-47472 - Bugzilla

OpenCVE Enrichment

No data.

{"bugzilla": {"description": "kernel: net: mdiobus: Fix memory leak in __mdiobus_register", "id": "2282883", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2282883"}, "csaw": false, "cvss3": {"cvss3_base_score": "0.0", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:N", "status": "draft"}, "cwe": "CWE-833", "details": ["[REJECTED CVE] A memory leak bug was identified in the Linux kernel's net: mdiobus module. When device_register() fails during __mdiobus_register, the reference count is not decremented via put_device(), resulting in unreferenced memory allocations and subsequent leaks."], "name": "CVE-2021-47472", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2024-05-22T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2021-47472\nhttps://nvd.nist.gov/vuln/detail/CVE-2021-47472\nhttps://lore.kernel.org/linux-cve-announce/2024052228-CVE-2021-47472-bd55@gregkh/T"], "statement": "This CVE has been rejected upstream:\nhttps://lore.kernel.org/linux-cve-announce/2024061703-REJECTED-713c@gregkh/\nRed Hat has also evaluated this issue and determined that it does not meet the criteria to be classified as a security vulnerability. This assessment is based on the issue not posing a significant security risk, being a result of misconfiguration or usage error, or falling outside the scope of security considerations. \nAs such, this CVE has been marked as \"Rejected\" in alignment with Red Hat's vulnerability management policies.\nIf you have additional information or concerns regarding this determination, please contact Red Hat Product Security for further clarification."}