CVE-2021-47660

MEDIUM

Linux Kernel 5.15-5.15.46, 5.17.14, 5.18.3 - Use-After-Free in NTFS3 Log Replay Error Handling

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()' All error handling paths lead to 'out' where many resources are freed. Do it as well here instead of a direct return, otherwise 'log', 'ra' and 'log->one_page_buf' (at least) will leak.

References (4)

Core 4

Scores

CVSS v3 5.5
EPSS 0.0023
EPSS Percentile 13.1%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-401
Status published
Products (11)
Linux/Linux < 5.15
Linux/Linux 5.15
Linux/Linux 5.15.46 - 5.15.*
Linux/Linux 5.17.14 - 5.17.*
Linux/Linux 5.18.3 - 5.18.*
Linux/Linux 5.19
Linux/Linux b46acd6a6a627d876898e1c84d3f84902264b445 - 2c97519ed6b4239594c58ddacf3d0d576cf070cc
Linux/Linux b46acd6a6a627d876898e1c84d3f84902264b445 - bc4a1d384a04c6dba9312e1421a9f9f7c03339a4
Linux/Linux b46acd6a6a627d876898e1c84d3f84902264b445 - d8be98ab88250dc12a98efdb703792a537b0eac3
Linux/Linux b46acd6a6a627d876898e1c84d3f84902264b445 - e589f9b7078e1c0191613cd736f598e81d2390de
... and 1 more
Published Feb 26, 2025
Tracked Since Feb 18, 2026