CVE-2021-47539

MEDIUM

Linux Kernel 5.10-5.10.83 - Use-After-Free in rxrpc_look_up_bundle

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle() Need to call rxrpc_put_peer() for bundle candidate before kfree() as it holds a ref to rxrpc_peer. [DH: v2: Changed to abstract out the bundle freeing code into a function]

References (3)

Core 3

Core References

Patch

https://git.kernel.org/stable/c/35b40f724c4ef0f683d94dab3af9ab38261d782b

Patch

https://git.kernel.org/stable/c/bc97458620e38961af9505cc060ad4cf5c9e4af7

Patch

https://git.kernel.org/stable/c/ca77fba821351190777b236ce749d7c4d353102e

Scores

CVSS v3 5.5

EPSS 0.0022

EPSS Percentile 12.6%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-401

Status published

Products (10)

Linux/Linux < 5.10

Linux/Linux 245500d853e9f20036cec7df4f6984ece4c6bf26 - 35b40f724c4ef0f683d94dab3af9ab38261d782b

Linux/Linux 245500d853e9f20036cec7df4f6984ece4c6bf26 - bc97458620e38961af9505cc060ad4cf5c9e4af7

Linux/Linux 245500d853e9f20036cec7df4f6984ece4c6bf26 - ca77fba821351190777b236ce749d7c4d353102e

Linux/Linux 5.10

Linux/Linux 5.10.84 - 5.10.*

Linux/Linux 5.15.7 - 5.15.*

Linux/Linux 5.16

linux/linux_kernel 5.16 rc1 (3 CPE variants)

linux/linux_kernel 5.10 - 5.10.84

Published May 24, 2024

Tracked Since Feb 18, 2026