PT-2021-8151 · Linux+3 · Linux Kernel+3

James Houghton

·

Published

2021-11-20

·

Updated

2024-10-25

·

CVE-2021-47214

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is related to a memory leak in the hugetlb mcopy atomic pte() function. When the code bails out using "goto out release unlock;" in certain cases, it detects that new pagecache page is false and calls restore reserve on error(), which deletes the reservation. This leads to a 100% reproducible leak when remove inode hugepages() is called, causing h->resv hugepages to increment. The problem can be resolved by treating the is continue case similar to adding a page into the pagecache and setting new pagecache page to true.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2024-09137
CVE-2021-47214
OPENSUSE-SU-2024_1644-1
OPENSUSE-SU-2024_1659-1
OPENSUSE-SU-2024_1663-1
SUSE-SU-2024:1644-1
SUSE-SU-2024:1659-1
SUSE-SU-2024:1663-1

Affected Products

Astra Linux
Linux Kernel
Red Os
Suse