PT-2024-11245 · Linux+2 · Linux Kernel+2

Pavel Skripkin · Published 2021-06-17 · Updated 2024-12-30 · CVE-2021-47237

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak vulnerability has been resolved in the Linux kernel. The issue was caused by a missing free netdev() call in the mkiss close() function, which led to a memory leak when the mkiss open() function allocated and registered a netdevice, but the mkiss close() function only unregistered it without freeing the memory. The vulnerability was identified by a syzbot instance, which detected the memory leak and provided a fail log with details of the unreferenced objects and backtraces.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

BDU:2025-07373

CVE-2021-47237

OPENSUSE-SU-2024_2185-1

SUSE-SU-2024:1979-1

SUSE-SU-2024:1983-1

SUSE-SU-2024:2010-1

SUSE-SU-2024:2184-1

SUSE-SU-2024:2185-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 674

• https://osv.dev/vulnerability/SUSE-SU-2024:1983-1 · Vendor Advisory
• https://git.kernel.org/stable/c/f4de2b43d13b7cf3ced9310e371b90c836dbd7cd · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:1979-1 · Vendor Advisory
• https://git.kernel.org/stable/c/7edcc682301492380fbdd604b4516af5ae667a13 · Patch
• https://ubuntu.com/security/CVE-2021-47237 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-47237 · Security Note
• https://git.kernel.org/stable/c/765a8a04f828db7222b36a42b1031f576bfe95c3 · Patch
• https://git.kernel.org/stable/c/a49cbb762ef20655f5c91abdc13658b0af5e159d · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:2185-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-47237 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-47237 · Vendor Advisory
• https://git.kernel.org/stable/c/3942d0f9ace1a95a74930b5b4fc0e5005c62b37b · Patch
• https://security-tracker.debian.org/tracker/CVE-2021-47237 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:2184-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-07373 · Security Note