CVE-2021-45480: Medium severity Linux Linux kernel vulnerability

Q: What is the severity of CVE-2021-45480?

CVE-2021-45480 has a moderate severity due to the potential for a memory leak in the Linux kernel.

Q: How do I fix CVE-2021-45480?

To fix CVE-2021-45480, update your Linux kernel to version 5.15.11 or higher.

Q: Which Linux kernel versions are affected by CVE-2021-45480?

CVE-2021-45480 affects Linux kernel versions prior to 5.15.11.

Q: What is the impact of CVE-2021-45480?

The impact of CVE-2021-45480 is a memory leak that can lead to performance degradation over time.

Q: Is CVE-2021-45480 specific to certain distributions?

Yes, CVE-2021-45480 affects various distributions that use vulnerable versions of the Linux kernel, including Debian.

Published Dec 24, 2021

Updated

An issue was discovered in the Linux kernel before 5.15.11. There is a memory leak in the rdsconncreate() function in net/rds/connection.c in a certain combination of circumstances.

Affected Software

5 affected componentsFixes available

Linux Linux kernel<5.15.11

Debian Debian Linux=9.0

Debian Debian Linux=10.0

Debian Debian Linux=11.0

debian/linux

6.1.176-16.1.190-16.12.107-16.12.115-27.2.12-17.2.15-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1
Upgrade
Upgrade Linux kernel to a version that resolves this vulnerability.
Fixed in 5.15.11

Event History

Dec 24, 2021

CVE Published

via MITRE·10:55 PM

Data Sourced

via MITRE·10:55 PM

Description

Parent advisories

This vulnerability appears in the following advisories.

Peer vulnerabilities

Found alongside the following vulnerabilities.

DLA-2941-1

Frequently Asked Questions

What is the severity of CVE-2021-45480?