Log in Start free

Vulnerability · Published May 21, 2024 · Assigned by Linux

CVE-2021-47403ipack: ipoctal: fix module reference leak

High 7.1

In plain English

A high-severity information exposure in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 16% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.1High
Exploit odds (30 days)0.2%top 83.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: ipack: ipoctal: fix module reference leak A reference to the carrier module was taken on every open but was only released once when the final reference to the tty struct was dropped. Fix this by taking the module reference and initialising the tty driver data when installing the tty.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux5.14.12-1DEBIAN-CVE-2021-47403
Debian:13linux5.14.12-1DEBIAN-CVE-2021-47403
Debian:14linux5.14.12-1DEBIAN-CVE-2021-47403
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2021-47403
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2021-47403
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2021-47403
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2021-47403
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2021-47403
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2021-47403
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2021-47403
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2021-47403
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2021-47403
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2021-47403
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2021-47403
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2021-47403
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2021-47403
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2021-47403
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2021-47403
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2021-47403
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2021-47403
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2021-47403
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2021-47403
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2021-47403
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2021-47403
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2021-47403
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2021-47403
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2021-47403

Affected products (as reported)

VendorProductVersions
Linux Linux 82a82340bab6c251e0705339f60763718eaa2a22 – before 31398849b84ebae0d43a1cf379cb9895597f221a82a82340bab6c251e0705339f60763718eaa2a22 – before c0adb5a947dec6cff7050ec56d78ecd3916f9ce682a82340bab6c251e0705339f60763718eaa2a22 – before dde4c1429b97383689f755ce92b4ed1e84a9c92b82a82340bab6c251e0705339f60763718eaa2a22 – before 9c5b77a7ffc983b2429ce158b50497c5d3c86a6982a82340bab6c251e0705339f60763718eaa2a22 – before 3253c87e1e5bc0107aab773af2f135ebccf3866682a82340bab6c251e0705339f60763718eaa2a22 – before 7cea848678470daadbfdaa6a112b823c290f900c82a82340bab6c251e0705339f60763718eaa2a22 – before 811178f296b16af30264def74c8d2179a72d556282a82340bab6c251e0705339f60763718eaa2a22 – before bb8a4fcb2136508224c596a7e665bdba1d7c3c27
Linux Linux 3.18

Weakness: CWE-200 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

References