CVE-2021-47320: nfs: fix acl memory leak of posix_acl_create()
In the Linux kernel, the following vulnerability has been resolved:
nfs: fix acl memory leak of posixaclcreate()
When looking into another nfs xfstests report, I found acl and defaultacl in nfs3proccreate() and nfs3procmknod() error paths are possibly leaked. Fix them in advance.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1
Event History
Frequently Asked Questions
What is the severity of CVE-2021-47320?
CVE-2021-47320 has a severity rating of medium, as it involves a memory leak in the Linux kernel.
How do I fix CVE-2021-47320?
To fix CVE-2021-47320, update your Linux kernel to a version that includes the patch addressing this vulnerability.
Which Linux kernel versions are affected by CVE-2021-47320?
CVE-2021-47320 affects multiple Linux kernel versions ranging from 3.14 to 5.13.4.
What is the impact of CVE-2021-47320?
The impact of CVE-2021-47320 is primarily a memory leak, which could potentially lead to increased memory usage over time.
Is CVE-2021-47320 related to NFS?
Yes, CVE-2021-47320 is related to the NFS subsystem in the Linux kernel, specifically affecting the handling of access control lists.