PT-2024-11246 · Linux+2 · Linux Kernel+2

Chengyang Fan + 1 · Published 2021-06-16 · Updated 2024-07-03 · CVE-2021-47238

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak vulnerability has been resolved in the Linux kernel. The issue is related to the ip mc add1 src function, where an unreferenced object is created, leading to a memory leak. The vulnerability occurs when the ip mc clear src function is removed from ip mc destroy dev, but still called in igmpv3 clear delrec, resulting in the inability to release in dev->mc list->sources through ip mc del1 src in sock close. This vulnerability can be exploited by an attacker to cause a denial-of-service (DoS) condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

BDU:2025-07374

CVE-2021-47238

SUSE-SU-2024:1979-1

SUSE-SU-2024:1983-1

SUSE-SU-2024:2184-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 457

• https://osv.dev/vulnerability/SUSE-SU-2024:1983-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:1979-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-47238 · Vendor Advisory
• https://git.kernel.org/stable/c/3dd2aeac2e9624cff9fa634710837e4f2e352758 · Patch
• https://git.kernel.org/stable/c/1e28018b5c83d5073f74a6fb72eabe8370b2f501 · Patch
• https://git.kernel.org/stable/c/77de6ee73f54a9a89c0afa0bf4c53b239aa9953a · Patch
• https://cve.org/CVERecord?id=CVE-2021-47238 · Security Note
• https://git.kernel.org/stable/c/6cff57eea3347f79f1867cc53e1093b6614138d8 · Patch
• https://osv.dev/vulnerability/CVE-2021-47238 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-07374 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-47238 · Security Note
• https://git.kernel.org/stable/c/d8e2973029b8b2ce477b564824431f3385c77083 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:2184-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-47238 · Vendor Advisory
• https://git.kernel.org/stable/c/0dc13e75507faa17ac9f7562b4ef7bf8fcd78422 · Patch