CVE-2021-47294
netrom: Decrease sock refcount when sock timers expire
MEDIUM 5.5
At a glance
- Source
- NVD
- EPSS
- EPSS 0.28 % · percentile 20 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Analyzed
Description
In the Linux kernel, the following vulnerability has been resolved: netrom: Decrease sock refcount when sock timers expire Commit 63346650c1a9 ("netrom: switch to sock timer API") switched to use sock timer API. It replaces mod_timer() by sk_reset_timer(), and del_timer() by sk_stop_timer(). Function sk_reset_timer() will increase the refcount of sock if it is called on an inactive timer, hence, in case the timer expires, we need to decrease the refcount ourselves in the handler, otherwise, the sock refcount will be unbalanced and the sock will never be freed.
Weaknesses (CWE)
- CWE-672 — Operation on a Resource after Expiration or Release
References
- https://git.kernel.org/stable/c/853262355518cd1247515b74e83fabf038aa6c29
- https://git.kernel.org/stable/c/a01634bf91f2b6c42583770eb6815fb6d1e251cf
- https://git.kernel.org/stable/c/48866fd5c361ea417ed24b43fc2a7dc2f5b060ef
- https://git.kernel.org/stable/c/9619cc7d97c3aa8ed3cfd2b8678b74fb6d6c7950
- https://git.kernel.org/stable/c/25df44e90ff5959b5c24ad361b648504a7e39ef3
- https://git.kernel.org/stable/c/6811744bd0efb9e472cb15d066cdb460beb8cb8a
- https://git.kernel.org/stable/c/bc1660206c3723c37ed4d622ad81781f1e987250
- https://git.kernel.org/stable/c/517a16b1a88bdb6b530f48d5d153478b2552d9a8
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2021-34299
- GCVE · GCVE-0-2021-47294
CERT-FR advisories
- CERTFR-2025-AVI-1008 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2025-AVI-0977 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0610 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0578 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 4.4.173 < 4.4.277cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 4.9.155 < 4.9.277cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 4.14.98 < 4.14.241cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 4.19.20 < 4.19.199cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.0 < 5.4.136cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.5 < 5.10.54cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.11 < 5.13.6cpe:2.3:o:linux:linux_kernel:3.18.134:*:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:4.20.7:*:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:5.14:rc1:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:5.14:rc2:*:*:*:*:*:*
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected ce29e8a259de767f7210d346ad2b031cb8ab2732 < 853262355518cd1247515b74e83fabf038aa6c29 ; affected baa9e32336bf6d0d74a7c3486d2a27feaf57cd5f < a01634bf91f2b6c42583770eb6815fb6d1e251cf ; affected 0adf571fa34b27bd0b97b408cc0f0dc54b72f0eb < 48866fd5c361ea417ed24b43fc2a7dc2f5b060ef ; affected 2c6b572458a9127e8070df13fa7f115c29ab1d92 < 9619cc7d97c3aa8ed3cfd2b8678b74fb6d6c7950 ; affected 63346650c1a94a92be61a57416ac88c0a47c4327 < 25df44e90ff5959b5c24ad361b648504a7e39ef3 ; affected 63346650c1a94a92be61a57416ac88c0a47c4327 < 6811744bd0efb9e472cb15d066cdb460beb8cb8a |
| Linux · Linux | affected 5.0 ; unaffected 0 < 5.0 ; unaffected 4.4.277 ≤ 4.4.* ; unaffected 4.9.277 ≤ 4.9.* ; unaffected 4.14.241 ≤ 4.14.* ; unaffected 4.19.199 ≤ 4.19.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |