5.5
CVE-2021-46996
- EPSS 0.25%
- Veröffentlicht 28.02.2024 09:15:38
- Zuletzt bearbeitet 06.12.2024 14:55:54
- CVE-Watchlists
- Unerledigt
netfilter: nftables: Fix a memleak from userdata error path in new objects
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: Fix a memleak from userdata error path in new objects Release object name if userdata allocation fails.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 5.10 < 5.10.38
Linux ≫ Linux Kernel Version >= 5.11 < 5.11.22
Linux ≫ Linux Kernel Version >= 5.12 < 5.12.5
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.25% | 0.156 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.5 | 1.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
|
CWE-401 Missing Release of Memory after Effective Lifetime
The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.
https://git.kernel.org/stable/c/2c784a500f5edd337258b0fdb2f31bc9abde1a23
https://git.kernel.org/stable/c/59fa98bfa1f4013d658d990cac88c87b46ff410c
https://git.kernel.org/stable/c/85dfd816fabfc16e71786eda0a33a7046688b5b0
https://git.kernel.org/stable/c/dd3bebf515f336214a91994348a2b86b9a1d3d7f