PT-2024-11477 · Linux+2 · Linux Kernel+2

Vincent Mailhol · Published 2021-11-07 · Updated 2024-08-19 · CVE-2021-47519

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak issue has been identified in the Linux kernel, specifically in the m can read fifo() function. This occurs when the second call to m can fifo read() fails, causing the function to jump to the out fail label and return without calling m can receive skb(). As a result, the skb previously allocated by alloc can skb() is not freed, leading to a memory leak. The issue was discovered using GCC -fanalyzer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Resource Exhaustion

Memory Leak

Weakness Enumeration

CWE-400

CWE-401

Related Identifiers

BDU:2025-04364

CVE-2021-47519

Affected Products

Astra Linux

Linux Kernel

Red Os

References · 16

• https://security-tracker.debian.org/tracker/CVE-2021-47519 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-47519 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-47519 · Vendor Advisory
• https://git.kernel.org/stable/c/31cb32a590d62b18f69a9a6d433f4e69c74fdd56 · Patch
• https://ubuntu.com/security/CVE-2021-47519 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-47519 · Vendor Advisory
• https://git.kernel.org/stable/c/75a422165477dd12d2d20aa7c9ee7c9a281c9908 · Patch
• https://cve.org/CVERecord?id=CVE-2021-47519 · Security Note
• https://bdu.fstec.ru/vul/2025-04364 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-47519 · Vendor Advisory
• https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.8 · Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-kernel-lt-19-08-24-2 · Note
• https://lore.kernel.org/linux-cve-announce/2024052432-CVE-2021-47519-ed69@gregkh · Note
• https://t.me/cvenotify/82639 · Telegram Post
• https://access.redhat.com/security/cve/cve-2021-47519 · Note