5.5

CVE-2021-46996

netfilter: nftables: Fix a memleak from userdata error path in new objects

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nftables: Fix a memleak from userdata error path in new objects

Release object name if userdata allocation fails.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
LinuxLinux Kernel Version >= 5.10 < 5.10.38
LinuxLinux Kernel Version >= 5.11 < 5.11.22
LinuxLinux Kernel Version >= 5.12 < 5.12.5
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.25% 0.156
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-401 Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

https://git.kernel.org/stable/c/2c784a500f5edd337258b0fdb2f31bc9abde1a23
Patch
https://git.kernel.org/stable/c/59fa98bfa1f4013d658d990cac88c87b46ff410c
Patch
https://git.kernel.org/stable/c/85dfd816fabfc16e71786eda0a33a7046688b5b0
Patch
https://git.kernel.org/stable/c/dd3bebf515f336214a91994348a2b86b9a1d3d7f
Patch