CVE-2021-47624

net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change

published July 16, 2024

CVSS
—
EPSS
0%
Percentile
13.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change

The refcount leak issues take place in an error handling path. When the

3rd argument buf doesn't match with "offline", "online" or "remove", the

function simply returns -EINVAL and forgets to decrease the reference

count of a rpc_xprt object and a rpc_xprt_switch object increased by

rpc_sysfs_xprt_kobj_get_xprt() and

rpc_sysfs_xprt_kobj_get_xprt_switch(), causing reference count leaks of

both unused objects.

Fix this issue by jumping to the error handling path labelled with

out_put when buf matches none of "offline", "online" or "remove".

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00237 · 13.9th percentile
Published
2024-07-16T11:29Z
EPSS history
Timeline
  • 16 JUL 11:29Z
    net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change
    cvelistv5