CVE-2021-47367

In the Linux kernel, the following vulnerability has been resolved: virtio-net: fix pages leaking when building skb in big mode We try to use build_skb() if we had sufficient tailroom. But we forget to release the unused pages chained via private in big mode which will leak pages. Fixing this by release the pages after building the skb in big mode.

CVSS v3 5.5 MEDIUM

5.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://git.kernel.org/stable/c/afd92d82c9d715fb97565408755acad81573591a	Patch
https://git.kernel.org/stable/c/f020bb63b5d2e5576acadd10e158fe3b04af67ba	Patch
https://git.kernel.org/stable/c/afd92d82c9d715fb97565408755acad81573591a	Patch
https://git.kernel.org/stable/c/f020bb63b5d2e5576acadd10e158fe3b04af67ba	Patch

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel:5.15:rc1::::::
	cpe:2.3:o:linux:linux_kernel:5.15:rc2::::::

History

02 Apr 2025, 14:53

Type	Values Removed	Values Added
First Time		Linux linux Kernel Linux
References	~~() https://git.kernel.org/stable/c/afd92d82c9d715fb97565408755acad81573591a -~~	() https://git.kernel.org/stable/c/afd92d82c9d715fb97565408755acad81573591a - Patch
References	~~() https://git.kernel.org/stable/c/f020bb63b5d2e5576acadd10e158fe3b04af67ba -~~	() https://git.kernel.org/stable/c/f020bb63b5d2e5576acadd10e158fe3b04af67ba - Patch
CPE		cpe:2.3:o:linux:linux_kernel:::::::: cpe:2.3:o:linux:linux_kernel:5.15:rc2:::::: cpe:2.3:o:linux:linux_kernel:5.15:rc1::::::

Information

Published : 2024-05-21 15:15

Updated : 2025-04-02 14:53

NVD link : CVE-2021-47367

Mitre link : CVE-2021-47367

CVE.ORG link : CVE-2021-47367

JSON object : View

Products Affected

linux

linux_kernel

CWE

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

{"id": "CVE-2021-47367", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "published": "2024-05-21T15:15:22.700", "references": [{"url": "https://git.kernel.org/stable/c/afd92d82c9d715fb97565408755acad81573591a", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/f020bb63b5d2e5576acadd10e158fe3b04af67ba", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/afd92d82c9d715fb97565408755acad81573591a", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://git.kernel.org/stable/c/f020bb63b5d2e5576acadd10e158fe3b04af67ba", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-119"}]}], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nvirtio-net: fix pages leaking when building skb in big mode\n\nWe try to use build_skb() if we had sufficient tailroom. But we forget\nto release the unused pages chained via private in big mode which will\nleak pages. Fixing this by release the pages after building the skb in\nbig mode."}, {"lang": "es", "value": " En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: virtio-net: corrige p\u00e1ginas con fugas al compilar skb en modo grande. Intentamos usar build_skb() si tuvi\u00e9ramos suficiente espacio de adaptaci\u00f3n. Pero nos olvidamos de liberar las p\u00e1ginas no utilizadas encadenadas v\u00eda privada en modo grande, lo que filtrar\u00e1 p\u00e1ginas. Para solucionar este problema, libere las p\u00e1ginas despu\u00e9s de compilar el skb en modo grande."}], "lastModified": "2025-04-02T14:53:39.063", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9DE2DB5B-20F3-4653-801E-20BF261486BC", "versionEndExcluding": "5.14.9", "versionStartIncluding": "5.13"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E46C74C6-B76B-4C94-A6A4-FD2FFF62D644"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "60134C3A-06E4-48C1-B04F-2903732A4E56"}], "operator": "OR"}]}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}