CVE-2021-47296

MEDIUM

Linux Kernel < 4.19.199 - Memory Leak

Title source: rule

Description

In the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Fix kvm_arch_vcpu_ioctl vcpu_load leak vcpu_put is not called if the user copy fails. This can result in preempt notifier corruption and crashes, among other issues.

References (5)

Scores

CVSS v3 5.5
EPSS 0.0001
EPSS Percentile 1.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Classification

CWE
CWE-401
Status published

Affected Products (3)

linux/linux_kernel < 4.19.199
linux/linux_kernel
linux/linux_kernel

Timeline

Published May 21, 2024
Tracked Since Feb 18, 2026