CVE-2021-46996

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-46996
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: Fix a memleak from userdata error path in new objects Release object name if userdata allocation fails.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/2c784a500f5edd337258b0fdb2f31bc9abde1a23 Patch
https://git.kernel.org/stable/c/59fa98bfa1f4013d658d990cac88c87b46ff410c Patch
https://git.kernel.org/stable/c/85dfd816fabfc16e71786eda0a33a7046688b5b0 Patch
https://git.kernel.org/stable/c/dd3bebf515f336214a91994348a2b86b9a1d3d7f Patch
https://git.kernel.org/stable/c/2c784a500f5edd337258b0fdb2f31bc9abde1a23 Patch
https://git.kernel.org/stable/c/59fa98bfa1f4013d658d990cac88c87b46ff410c Patch
https://git.kernel.org/stable/c/85dfd816fabfc16e71786eda0a33a7046688b5b0 Patch
https://git.kernel.org/stable/c/dd3bebf515f336214a91994348a2b86b9a1d3d7f Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

06 Dec 2024, 14:55

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/2c784a500f5edd337258b0fdb2f31bc9abde1a23 - () https://git.kernel.org/stable/c/2c784a500f5edd337258b0fdb2f31bc9abde1a23 - Patch
References () https://git.kernel.org/stable/c/59fa98bfa1f4013d658d990cac88c87b46ff410c - () https://git.kernel.org/stable/c/59fa98bfa1f4013d658d990cac88c87b46ff410c - Patch
References () https://git.kernel.org/stable/c/85dfd816fabfc16e71786eda0a33a7046688b5b0 - () https://git.kernel.org/stable/c/85dfd816fabfc16e71786eda0a33a7046688b5b0 - Patch
References () https://git.kernel.org/stable/c/dd3bebf515f336214a91994348a2b86b9a1d3d7f - () https://git.kernel.org/stable/c/dd3bebf515f336214a91994348a2b86b9a1d3d7f - Patch
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE CWE-401
First Time Linux linux Kernel
Linux

21 Nov 2024, 06:35

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/2c784a500f5edd337258b0fdb2f31bc9abde1a23 - () https://git.kernel.org/stable/c/2c784a500f5edd337258b0fdb2f31bc9abde1a23 -
References () https://git.kernel.org/stable/c/59fa98bfa1f4013d658d990cac88c87b46ff410c - () https://git.kernel.org/stable/c/59fa98bfa1f4013d658d990cac88c87b46ff410c -
References () https://git.kernel.org/stable/c/85dfd816fabfc16e71786eda0a33a7046688b5b0 - () https://git.kernel.org/stable/c/85dfd816fabfc16e71786eda0a33a7046688b5b0 -
References () https://git.kernel.org/stable/c/dd3bebf515f336214a91994348a2b86b9a1d3d7f - () https://git.kernel.org/stable/c/dd3bebf515f336214a91994348a2b86b9a1d3d7f -
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: netfilter: nftables: corrige una fuga de memoria de la ruta de error de los datos del usuario en objetos nuevos. Libera el nombre del objeto si falla la asignación de los datos del usuario.

28 Feb 2024, 09:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-02-28 09:15

Updated : 2024-12-06 14:55

NVD link : CVE-2021-46996

Mitre link : CVE-2021-46996

CVE.ORG link : CVE-2021-46996

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime