PT-2024-11399 · Linux+2 · Linux Kernel+2
Johan Hovold
·
Published
2021-09-27
·
Updated
2024-08-16
·
CVE-2021-47403
CVSS v3.1
7.1
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A module reference leak was found in the Linux kernel, specifically in the ipack: ipoctal module. The issue occurred because a reference to the carrier module was taken on every open but was only released once when the final reference to the tty struct was dropped. This has been fixed by taking the module reference and initialising the tty driver data when installing the tty.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Information Disclosure
Memory Leak
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Suse