CVE-2021-47568

EPSS 0.18%
Veröffentlicht 24.05.2024 15:15:22
Zuletzt bearbeitet 06.01.2025 21:33:33
CVE-Watchlists
Login
Unerledigt
Login

ksmbd: fix memleak in get_file_stream_info()

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix memleak in get_file_stream_info()

Fix memleak in get_file_stream_info()

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 5

NVD 3 VulnDex Vulnerability Enrichment 3

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Linux ≫ Linux Kernel Version >= 5.15 < 5.15.6

Linux ≫ Linux Kernel Version5.16 Updaterc1

Linux ≫ Linux Kernel Version5.16 Updaterc2

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.18%	0.077

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	5.5	1.8	3.6	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-401 Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

https://git.kernel.org/stable/c/11e659827c3a2facb3a04e08cc97ff14d5091f51

Patch

https://git.kernel.org/stable/c/178ca6f85aa3231094467691f5ea1ff2f398aa8d

Patch

https://nvd.nist.gov/vuln/detail/CVE-2021-47568

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2021-47568

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2021-47568

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2021-47568