PT-2024-11460 · Linux+6 · Linux Kernel+6

Miaohe Lin · Published 2021-10-18 · Updated 2025-01-07 · CVE-2021-47466

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A potential memory leak in the Linux kernel has been resolved. The issue occurred in the error path of the kmem cache open() function, where the random seq of the slub cache might be leaked. This has been fixed by using kmem cache release() to release all relevant resources.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Leak

Weakness Enumeration

CWE-401

CWE-402

Related Identifiers

ALSA-2024:7000

ALSA-2024:7001

BDU:2025-04382

CESA-2024_7000

CESA-2024_7001

CVE-2021-47466

INFSA-2024_7000

INFSA-2024_7001

OESA-2024-1767

OPENSUSE-SU-2024_2189-1

RHSA-2024:7000

RHSA-2024:7001

RHSA-2024_7000

RHSA-2024_7001

RLSA-2024:7001

SUSE-SU-2024:2008-1

SUSE-SU-2024:2011-1

SUSE-SU-2024:2019-1

SUSE-SU-2024:2189-1

SUSE-SU-2024:2190-1

Affected Products

Almalinux

Astra Linux

Centos

Linux Kernel

Red Hat

Rocky Linux

Suse

References · 1711

• https://nvd.nist.gov/vuln/detail/CVE-2024-36971 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2024:2190-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-38607 · Security Note
• https://osv.dev/vulnerability/RLSA-2024:7001 · Vendor Advisory
• https://git.kernel.org/stable/c/42b81946e3ac9ea0372ba16e05160dc11e02694f · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:2019-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-47565 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-52834 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-36894 · Security Note
• https://ubuntu.com/security/CVE-2021-47466 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2024-7000.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-36941 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-38552 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-47500 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-47466 · Vendor Advisory