PT-2024-11077 · Linux+1 · Linux Kernel+1

Marc Hartmayer · Published 2021-04-21 · Updated 2025-01-08 · CVE-2021-46968

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a memory leak in the Linux kernel, specifically in the s390/zcrypt module. Tests with kvm and a kmemdebug kernel showed that on hot unplug, the zcard and zqueue structs for the unplugged card or queue are not properly freed due to a mismatch with get/put for the embedded kref counter. This fix adjusts the handling of the kref counters, which start with an initial value of 1 and need to drop to zero with the unregister of the card or queue to trigger the release and free the object.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

BDU:2025-02991

CVE-2021-46968

OPENSUSE-SU-2024_0857-1

SUSE-SU-2024:0856-1

SUSE-SU-2024:0857-1

Affected Products

Linux Kernel

Suse

References · 169

• https://git.kernel.org/stable/c/026499a9c2e002e621ad568d1378324ae97e5524 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-46968 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-46968 · Security Note
• https://git.kernel.org/stable/c/971dc8706cee47393d393905d294ea47e39503d3 · Patch
• https://osv.dev/vulnerability/CVE-2021-46968 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:0856-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:0857-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-46968 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2021-46968 · Vendor Advisory
• https://git.kernel.org/stable/c/70fac8088cfad9f3b379c9082832b4d7532c16c2 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-46968 · Security Note
• https://git.kernel.org/stable/c/055a063a18bcd19b93709e3eac8078d6b2f04599 · Patch
• https://bdu.fstec.ru/vul/2025-02991 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-46968 · Vendor Advisory
• https://bugzilla.suse.com/1220641 · Note