CVE-2021-47403
In the Linux kernel, the following vulnerability has been resolved: ipack: ipoctal: fix module reference leak A reference to the carrier module was taken on every open but was only released once when the final reference to the tty struct was dropped.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.25%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
In the Linux kernel, the following vulnerability has been resolved: ipack: ipoctal: fix module reference leak A reference to the carrier module was taken on every open but was only released once when the final reference to the tty struct was dropped. Fix this by taking the module reference and initialising the tty driver data when installing the tty.
- CVSS 3.1
- 7.1 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
- EPSS
- 0.25% probability · 16th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- linux/linux kernel
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/31398849b84ebae0d43a1cf379cb9895597f221aPatch
- https://git.kernel.org/stable/c/3253c87e1e5bc0107aab773af2f135ebccf38666Patch
- https://git.kernel.org/stable/c/7cea848678470daadbfdaa6a112b823c290f900cPatch
- https://git.kernel.org/stable/c/811178f296b16af30264def74c8d2179a72d5562Patch
- https://git.kernel.org/stable/c/9c5b77a7ffc983b2429ce158b50497c5d3c86a69Patch
- https://git.kernel.org/stable/c/bb8a4fcb2136508224c596a7e665bdba1d7c3c27Patch
- https://git.kernel.org/stable/c/c0adb5a947dec6cff7050ec56d78ecd3916f9ce6Patch
- https://git.kernel.org/stable/c/dde4c1429b97383689f755ce92b4ed1e84a9c92bPatch
- https://git.kernel.org/stable/c/31398849b84ebae0d43a1cf379cb9895597f221aPatch
- https://git.kernel.org/stable/c/3253c87e1e5bc0107aab773af2f135ebccf38666Patch
- https://git.kernel.org/stable/c/7cea848678470daadbfdaa6a112b823c290f900cPatch
- https://git.kernel.org/stable/c/811178f296b16af30264def74c8d2179a72d5562Patch
- https://git.kernel.org/stable/c/9c5b77a7ffc983b2429ce158b50497c5d3c86a69Patch
- https://git.kernel.org/stable/c/bb8a4fcb2136508224c596a7e665bdba1d7c3c27Patch
- https://git.kernel.org/stable/c/c0adb5a947dec6cff7050ec56d78ecd3916f9ce6Patch
- https://git.kernel.org/stable/c/dde4c1429b97383689f755ce92b4ed1e84a9c92bPatch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.