CVE-2021-47320

MEDIUM

Linux Kernel 3.14-4.4.276 - Use-After-Free in NFS ACL Handling

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: nfs: fix acl memory leak of posix_acl_create() When looking into another nfs xfstests report, I found acl and default_acl in nfs3_proc_create() and nfs3_proc_mknod() error paths are possibly leaked. Fix them in advance.

References (9)

Core 9

Scores

CVSS v3 5.5
EPSS 0.0026
EPSS Percentile 17.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-401
Status published
Products (21)
Linux/Linux < 3.14
Linux/Linux 013cdf1088d7235da9477a2375654921d9b9ba9f - 0704f617040c397ae73c1f88f3956787ec5d6529
Linux/Linux 013cdf1088d7235da9477a2375654921d9b9ba9f - 1fcb6fcd74a222d9ead54d405842fc763bb86262
Linux/Linux 013cdf1088d7235da9477a2375654921d9b9ba9f - 2e3960f276b4574a9bb0dfa31a7497302f6363b2
Linux/Linux 013cdf1088d7235da9477a2375654921d9b9ba9f - 4b515308ab875c7e8ada8e606fe0c64762da5ed4
Linux/Linux 013cdf1088d7235da9477a2375654921d9b9ba9f - 687cf32865b2d6960214bce523f2afac58dd3cd2
Linux/Linux 013cdf1088d7235da9477a2375654921d9b9ba9f - 8a2b308a54c5ec224fedc753617f99b29ffcd883
Linux/Linux 013cdf1088d7235da9477a2375654921d9b9ba9f - c8fc86e9df6a6a03f5a8e15a3b7a5c75fd05aa38
Linux/Linux 013cdf1088d7235da9477a2375654921d9b9ba9f - cef9d9acb7c80ed6bace894b6334557fd493863b
Linux/Linux 013cdf1088d7235da9477a2375654921d9b9ba9f - d0b32dc1409f7e65e4fcc34e236462268e69a357
... and 11 more
Published May 21, 2024
Tracked Since Feb 18, 2026