PT-2021-8268 · Linux+1 · Linux Kernel+1

Syzbot · Published 2021-04-20 · Updated 2024-12-06 · CVE-2021-47024

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a memory leak in the Linux kernel when closing a socket. Specifically, the vsock/virtio component fails to free queued packets, leading to a memory leak. This was partially addressed with a commit, but the RX queue was not properly drained when the socket is closed. To resolve this, the virtio transport remove sock() function is used to drain the RX queue before removing the socket from the af vsock lists.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

BDU:2025-00806

CVE-2021-47024

OESA-2024-1345

OESA-2024-1346

SUSE-SU-2024:1643-1

SUSE-SU-2024:1646-1

SUSE-SU-2024:1870-1

Affected Products

Linux Kernel

Suse

References · 476

• https://cve.org/CVERecord?id=CVE-2021-47024 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2024:1646-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-47013 · Security Note
• https://git.kernel.org/stable/c/27691665145e74a45034a9dccf1150cf1894763a · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2020-36782 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-46955 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-47049 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-52604 · Security Note
• https://bdu.fstec.ru/vul/2025-00806 · Security Note
• https://git.kernel.org/stable/c/37c38674ef2f8d7e8629e5d433c37d6c1273d16b · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-47024 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-46909 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2024:1870-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2024-1345 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-47024 · Security Note