CVE-2021-47024

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

vsock/virtio: free queued packets when closing socket

As reported by syzbot [1], there is a memory leak while closing the socket. We partially solved this issue with commit ac03046ece2b ("vsock/virtio: free packets during the socket release"), but we forgot to drain the RX queue when the socket is definitely closed by the scheduled work.

To avoid future issues, let's use the new virtio_transport_remove_sock() to drain the RX queue before removing the socket from the af_vsock lists calling vsock_remove_sock().

[1] https://syzkaller.appspot.com/bug?extid=24452624fc4c571eedd9

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-401

Affected software

VendorProductVersions
LinuxLinux>= ac03046ece2b158ebd204dfc4896fd9f39f0e6c8, < b605673b523fe33abeafb2136759bcbc9c1e6ebf; >= ac03046ece2b158ebd204dfc4896fd9f39f0e6c8, < 27691665145e74a45034a9dccf1150cf1894763a; >= ac03046ece2b158ebd204dfc4896fd9f39f0e6c8, < 37c38674ef2f8d7e8629e5d433c37d6c1273d16b; >= ac03046ece2b158ebd204dfc4896fd9f39f0e6c8, < 8432b8114957235f42e070a16118a7f750de9d39; 4ea082cd3c400cd5bb36a7beb7e441bf3e29350d; 4e539fa2dec4db3405e47002f2878aa4a99eb68b; 4af8a327aeba102aaa9b78f3451f725bc590b237; 51adb8ebe8c1d80528fc2ea863cfea9d32d2c52b; 7d29c9ad0ed525c1b10e29cfca4fb1eece1e93fb; >= 4.9.179, < 4.10; >= 4.14.122, < 4.15; >= 4.19.46, < 4.20; >= 5.0.19, < 5.1; >= 5.1.5, < 5.2
LinuxLinux5.2

References

Timeline

Published
Feb 28, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2021

CVE-2021-470257.8In the Linux kernel, the following vulnerability has been resolved: iommu/mediatek: Always enable the clk on resume In mtk_iommu_runtime_rCVE-2021-470267.8In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-clt: destroy sysfs after removing session from active list ACVE-2021-470275.5In the Linux kernel, the following vulnerability has been resolved: mt76: mt7921: fix kernel crash when the firmware fails to download FixCVE-2021-470287.8In the Linux kernel, the following vulnerability has been resolved: mt76: mt7915: fix txrate reporting Properly check rate_info to fix uneCVE-2021-470295.5In the Linux kernel, the following vulnerability has been resolved: mt76: connac: fix kernel warning adding monitor interface Fix the follCVE-2021-470305.5In the Linux kernel, the following vulnerability has been resolved: mt76: mt7615: fix memory leak in mt7615_coredump_work Similar to the iCVE-2021-470314.3In the Linux kernel, the following vulnerability has been resolved: mt76: mt7921: fix memory leak in mt7921_coredump_work Fix possible memCVE-2021-470325.5In the Linux kernel, the following vulnerability has been resolved: mt76: mt7915: fix tx skb dma unmap The first pointer in the txp needs CVE-2021-470335.5In the Linux kernel, the following vulnerability has been resolved: mt76: mt7615: fix tx skb dma unmap The first pointer in the txp needs CVE-2021-470344.4In the Linux kernel, the following vulnerability has been resolved: powerpc/64s: Fix pte update for kernel memory on radix When adding a PCVE-2021-470355.5In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Remove WO permissions on second-level paging entries When CVE-2021-470365.5In the Linux kernel, the following vulnerability has been resolved: udp: skip L4 aggregation for UDP tunnel packets If NETIF_F_GRO_FRAGLIS
CVE-2021-47024: Medium severity, CVSS 5.5 | Vulnix