CVE-2021-47514

Summary

In the Linux kernel, the following vulnerability has been resolved:

devlink: fix netns refcount leak in devlink_nl_cmd_reload()

While preparing my patch series adding netns refcount tracking, I spotted bugs in devlink_nl_cmd_reload()

Some error paths forgot to release a refcount on a netns.

To fix this, we can reduce the scope of get_net()/put_net() section around the call to devlink_reload().

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxccdf07219da6bd1f43c6ddcde4c0e36993c7365a < 4b7e90672af8e0c78205db006f1b0a20ebd07f5faffected
LinuxLinuxccdf07219da6bd1f43c6ddcde4c0e36993c7365a < fe30b70ca84da9c4aca85c03ad86e7a9b89c5dedaffected
LinuxLinuxccdf07219da6bd1f43c6ddcde4c0e36993c7365a < 4dbb0dad8e63fcd0b5a117c2861d2abe7ff5f186affected
LinuxLinux5.10affected
LinuxLinux0 < 5.10unaffected
LinuxLinux5.10.85 <= 5.10.*unaffected
LinuxLinux5.15.8 <= 5.15.*unaffected
LinuxLinux5.16 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References