5.5

CVE-2021-47345

RDMA/cma: Fix rdma_resolve_route() memory leak

In the Linux kernel, the following vulnerability has been resolved:

RDMA/cma: Fix rdma_resolve_route() memory leak

Fix a memory leak when "mda_resolve_route() is called more than once on
the same "rdma_cm_id".

This is possible if cma_query_handler() triggers the
RDMA_CM_EVENT_ROUTE_ERROR flow which puts the state machine back and
allows rdma_resolve_route() to be called again.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version < 4.4.276
Linux ≫ Linux Kernel Version >= 4.5 < 4.9.276
Linux ≫ Linux Kernel Version >= 4.10 < 4.14.240
Linux ≫ Linux Kernel Version >= 4.15 < 4.19.198
Linux ≫ Linux Kernel Version >= 4.20 < 5.4.133
Linux ≫ Linux Kernel Version >= 5.5 < 5.10.51
Linux ≫ Linux Kernel Version >= 5.11 < 5.12.18
Linux ≫ Linux Kernel Version >= 5.13 < 5.13.3
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.26% 0.169
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-401 Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

https://git.kernel.org/stable/c/032c68b4f5be128a2167f35b558b7cec88fe4972
Patch
https://git.kernel.org/stable/c/07583ba2e2d8947c3d365d97608cb436510885ac
Patch
https://git.kernel.org/stable/c/3d08b5917984f737f32d5bee9737b9075c3895c6
Patch
https://git.kernel.org/stable/c/40b613db3a95bc27998e4097d74c2f7e5d083a0b
Patch
https://git.kernel.org/stable/c/4893c938f2a140a74be91779e45e4a7fa111198f
Patch
https://git.kernel.org/stable/c/74f160ead74bfe5f2b38afb4fcf86189f9ff40c9
Patch
https://git.kernel.org/stable/c/e2da8ce2a9543f3ca5c93369bd1fe6eeb572101a
Patch
https://git.kernel.org/stable/c/e4e062da082a199357ba4911145f331d40139ad8
Patch
https://git.kernel.org/stable/c/f4f553d67236145fa5fd203ed7b35b9377e19939
Patch