CVE-2021-47294 (GCVE-0-2021-47294)
Vulnerability from cvelistv5
Published
2024-05-21 14:35
Modified
2025-05-04 12:41
Severity ?
Summary
In the Linux kernel, the following vulnerability has been resolved: netrom: Decrease sock refcount when sock timers expire Commit 63346650c1a9 ("netrom: switch to sock timer API") switched to use sock timer API. It replaces mod_timer() by sk_reset_timer(), and del_timer() by sk_stop_timer(). Function sk_reset_timer() will increase the refcount of sock if it is called on an inactive timer, hence, in case the timer expires, we need to decrease the refcount ourselves in the handler, otherwise, the sock refcount will be unbalanced and the sock will never be freed.
References
416baaa9-dc9f-4396-8d5f-8c081fb06d67 https://git.kernel.org/stable/c/25df44e90ff5959b5c24ad361b648504a7e39ef3 Patch
416baaa9-dc9f-4396-8d5f-8c081fb06d67 https://git.kernel.org/stable/c/48866fd5c361ea417ed24b43fc2a7dc2f5b060ef Patch
416baaa9-dc9f-4396-8d5f-8c081fb06d67 https://git.kernel.org/stable/c/517a16b1a88bdb6b530f48d5d153478b2552d9a8 Patch
416baaa9-dc9f-4396-8d5f-8c081fb06d67 https://git.kernel.org/stable/c/6811744bd0efb9e472cb15d066cdb460beb8cb8a Patch
416baaa9-dc9f-4396-8d5f-8c081fb06d67 https://git.kernel.org/stable/c/853262355518cd1247515b74e83fabf038aa6c29 Patch
416baaa9-dc9f-4396-8d5f-8c081fb06d67 https://git.kernel.org/stable/c/9619cc7d97c3aa8ed3cfd2b8678b74fb6d6c7950 Patch
416baaa9-dc9f-4396-8d5f-8c081fb06d67 https://git.kernel.org/stable/c/a01634bf91f2b6c42583770eb6815fb6d1e251cf Patch
416baaa9-dc9f-4396-8d5f-8c081fb06d67 https://git.kernel.org/stable/c/bc1660206c3723c37ed4d622ad81781f1e987250 Patch
af854a3a-2127-422b-91ae-364da2661108 https://git.kernel.org/stable/c/25df44e90ff5959b5c24ad361b648504a7e39ef3 Patch
af854a3a-2127-422b-91ae-364da2661108 https://git.kernel.org/stable/c/48866fd5c361ea417ed24b43fc2a7dc2f5b060ef Patch
af854a3a-2127-422b-91ae-364da2661108 https://git.kernel.org/stable/c/517a16b1a88bdb6b530f48d5d153478b2552d9a8 Patch
af854a3a-2127-422b-91ae-364da2661108 https://git.kernel.org/stable/c/6811744bd0efb9e472cb15d066cdb460beb8cb8a Patch
af854a3a-2127-422b-91ae-364da2661108 https://git.kernel.org/stable/c/853262355518cd1247515b74e83fabf038aa6c29 Patch
af854a3a-2127-422b-91ae-364da2661108 https://git.kernel.org/stable/c/9619cc7d97c3aa8ed3cfd2b8678b74fb6d6c7950 Patch
af854a3a-2127-422b-91ae-364da2661108 https://git.kernel.org/stable/c/a01634bf91f2b6c42583770eb6815fb6d1e251cf Patch
af854a3a-2127-422b-91ae-364da2661108 https://git.kernel.org/stable/c/bc1660206c3723c37ed4d622ad81781f1e987250 Patch
Impacted products
Vendor Product Version
Linux Linux Version: ce29e8a259de767f7210d346ad2b031cb8ab2732
Version: baa9e32336bf6d0d74a7c3486d2a27feaf57cd5f
Version: 0adf571fa34b27bd0b97b408cc0f0dc54b72f0eb
Version: 2c6b572458a9127e8070df13fa7f115c29ab1d92
Version: 63346650c1a94a92be61a57416ac88c0a47c4327
Version: 63346650c1a94a92be61a57416ac88c0a47c4327
Version: 63346650c1a94a92be61a57416ac88c0a47c4327
Version: 63346650c1a94a92be61a57416ac88c0a47c4327
Version: f1d9a1f2ef6ff17293d21d5e6b80e04bea0cf508
Version: 519e8a22a454b1f1baa3a151b184fe51bc18e178
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2021-47294",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-28T19:24:54.424642Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-04T17:14:49.177Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T05:32:08.527Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/853262355518cd1247515b74e83fabf038aa6c29"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/a01634bf91f2b6c42583770eb6815fb6d1e251cf"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/48866fd5c361ea417ed24b43fc2a7dc2f5b060ef"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/9619cc7d97c3aa8ed3cfd2b8678b74fb6d6c7950"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/25df44e90ff5959b5c24ad361b648504a7e39ef3"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/6811744bd0efb9e472cb15d066cdb460beb8cb8a"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/bc1660206c3723c37ed4d622ad81781f1e987250"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/517a16b1a88bdb6b530f48d5d153478b2552d9a8"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/netrom/nr_timer.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "853262355518cd1247515b74e83fabf038aa6c29",
              "status": "affected",
              "version": "ce29e8a259de767f7210d346ad2b031cb8ab2732",
              "versionType": "git"
            },
            {
              "lessThan": "a01634bf91f2b6c42583770eb6815fb6d1e251cf",
              "status": "affected",
              "version": "baa9e32336bf6d0d74a7c3486d2a27feaf57cd5f",
              "versionType": "git"
            },
            {
              "lessThan": "48866fd5c361ea417ed24b43fc2a7dc2f5b060ef",
              "status": "affected",
              "version": "0adf571fa34b27bd0b97b408cc0f0dc54b72f0eb",
              "versionType": "git"
            },
            {
              "lessThan": "9619cc7d97c3aa8ed3cfd2b8678b74fb6d6c7950",
              "status": "affected",
              "version": "2c6b572458a9127e8070df13fa7f115c29ab1d92",
              "versionType": "git"
            },
            {
              "lessThan": "25df44e90ff5959b5c24ad361b648504a7e39ef3",
              "status": "affected",
              "version": "63346650c1a94a92be61a57416ac88c0a47c4327",
              "versionType": "git"
            },
            {
              "lessThan": "6811744bd0efb9e472cb15d066cdb460beb8cb8a",
              "status": "affected",
              "version": "63346650c1a94a92be61a57416ac88c0a47c4327",
              "versionType": "git"
            },
            {
              "lessThan": "bc1660206c3723c37ed4d622ad81781f1e987250",
              "status": "affected",
              "version": "63346650c1a94a92be61a57416ac88c0a47c4327",
              "versionType": "git"
            },
            {
              "lessThan": "517a16b1a88bdb6b530f48d5d153478b2552d9a8",
              "status": "affected",
              "version": "63346650c1a94a92be61a57416ac88c0a47c4327",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "f1d9a1f2ef6ff17293d21d5e6b80e04bea0cf508",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "519e8a22a454b1f1baa3a151b184fe51bc18e178",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/netrom/nr_timer.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.0"
            },
            {
              "lessThan": "5.0",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.4.*",
              "status": "unaffected",
              "version": "4.4.277",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.9.*",
              "status": "unaffected",
              "version": "4.9.277",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.241",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.199",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.136",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.54",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.13.*",
              "status": "unaffected",
              "version": "5.13.6",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "5.14",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.4.277",
                  "versionStartIncluding": "4.4.173",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.9.277",
                  "versionStartIncluding": "4.9.155",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.241",
                  "versionStartIncluding": "4.14.98",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.199",
                  "versionStartIncluding": "4.19.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.136",
                  "versionStartIncluding": "5.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.54",
                  "versionStartIncluding": "5.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.13.6",
                  "versionStartIncluding": "5.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.14",
                  "versionStartIncluding": "5.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "3.18.134",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.20.7",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetrom: Decrease sock refcount when sock timers expire\n\nCommit 63346650c1a9 (\"netrom: switch to sock timer API\") switched to use\nsock timer API. It replaces mod_timer() by sk_reset_timer(), and\ndel_timer() by sk_stop_timer().\n\nFunction sk_reset_timer() will increase the refcount of sock if it is\ncalled on an inactive timer, hence, in case the timer expires, we need to\ndecrease the refcount ourselves in the handler, otherwise, the sock\nrefcount will be unbalanced and the sock will never be freed."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-04T12:41:20.978Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/853262355518cd1247515b74e83fabf038aa6c29"
        },
        {
          "url": "https://git.kernel.org/stable/c/a01634bf91f2b6c42583770eb6815fb6d1e251cf"
        },
        {
          "url": "https://git.kernel.org/stable/c/48866fd5c361ea417ed24b43fc2a7dc2f5b060ef"
        },
        {
          "url": "https://git.kernel.org/stable/c/9619cc7d97c3aa8ed3cfd2b8678b74fb6d6c7950"
        },
        {
          "url": "https://git.kernel.org/stable/c/25df44e90ff5959b5c24ad361b648504a7e39ef3"
        },
        {
          "url": "https://git.kernel.org/stable/c/6811744bd0efb9e472cb15d066cdb460beb8cb8a"
        },
        {
          "url": "https://git.kernel.org/stable/c/bc1660206c3723c37ed4d622ad81781f1e987250"
        },
        {
          "url": "https://git.kernel.org/stable/c/517a16b1a88bdb6b530f48d5d153478b2552d9a8"
        }
      ],
      "title": "netrom: Decrease sock refcount when sock timers expire",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2021-47294",
    "datePublished": "2024-05-21T14:35:18.034Z",
    "dateReserved": "2024-05-21T13:27:52.130Z",
    "dateUpdated": "2025-05-04T12:41:20.978Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2021-47294\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-05-21T15:15:17.323\",\"lastModified\":\"2025-06-23T20:19:04.490\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nnetrom: Decrease sock refcount when sock timers expire\\n\\nCommit 63346650c1a9 (\\\"netrom: switch to sock timer API\\\") switched to use\\nsock timer API. It replaces mod_timer() by sk_reset_timer(), and\\ndel_timer() by sk_stop_timer().\\n\\nFunction sk_reset_timer() will increase the refcount of sock if it is\\ncalled on an inactive timer, hence, in case the timer expires, we need to\\ndecrease the refcount ourselves in the handler, otherwise, the sock\\nrefcount will be unbalanced and the sock will never be freed.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: netrom: Disminuir el recuento de sock cuando caducan los temporizadores de sock. La confirmaci\u00f3n 63346650c1a9 (\\\"netrom: cambiar a API de temporizador de sock\\\") cambi\u00f3 para usar la API de temporizador de sock. Reemplaza mod_timer() por sk_reset_timer() y del_timer() por sk_stop_timer(). La funci\u00f3n sk_reset_timer() aumentar\u00e1 el recuento del sock si se llama en un temporizador inactivo, por lo tanto, en caso de que el temporizador expire, debemos disminuir el recuento nosotros mismos en el controlador; de lo contrario, el recuento del calcet\u00edn se desequilibrar\u00e1 y el sock nunca ser\u00e1 liberado.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-672\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.4.173\",\"versionEndExcluding\":\"4.4.277\",\"matchCriteriaId\":\"3E3226CA-19FE-4D01-AF65-32A8C5BF4B1D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.9.155\",\"versionEndExcluding\":\"4.9.277\",\"matchCriteriaId\":\"9BF1259C-DF0B-48E1-8EA8-2AB91A7AA4E4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.14.98\",\"versionEndExcluding\":\"4.14.241\",\"matchCriteriaId\":\"E285CAFB-29D0-4687-BDD6-1EAB4F397AC7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.19.20\",\"versionEndExcluding\":\"4.19.199\",\"matchCriteriaId\":\"1DFDBA04-2E4D-4E4A-A386-237989BB8C1E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.0\",\"versionEndExcluding\":\"5.4.136\",\"matchCriteriaId\":\"89436D92-8C87-413A-8CD9-4CF06FCCEABD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.5\",\"versionEndExcluding\":\"5.10.54\",\"matchCriteriaId\":\"1BD5A2EE-859F-40FC-BDAC-167AAE37C870\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.13.6\",\"matchCriteriaId\":\"512C22FC-1524-4E6F-9E62-4F4B7B6E0576\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.18.134:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"407D22E1-55CF-4117-B460-329990673A2A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:4.20.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1AF86F57-4FAC-4E41-8FB4-F35F985F4DC3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:5.14:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"71268287-21A8-4488-AA4F-23C473153131\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:5.14:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"23B9E5C6-FAB5-4A02-9E39-27C8787B0991\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/25df44e90ff5959b5c24ad361b648504a7e39ef3\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/48866fd5c361ea417ed24b43fc2a7dc2f5b060ef\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/517a16b1a88bdb6b530f48d5d153478b2552d9a8\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/6811744bd0efb9e472cb15d066cdb460beb8cb8a\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/853262355518cd1247515b74e83fabf038aa6c29\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/9619cc7d97c3aa8ed3cfd2b8678b74fb6d6c7950\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/a01634bf91f2b6c42583770eb6815fb6d1e251cf\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/bc1660206c3723c37ed4d622ad81781f1e987250\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/25df44e90ff5959b5c24ad361b648504a7e39ef3\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/48866fd5c361ea417ed24b43fc2a7dc2f5b060ef\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/517a16b1a88bdb6b530f48d5d153478b2552d9a8\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/6811744bd0efb9e472cb15d066cdb460beb8cb8a\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/853262355518cd1247515b74e83fabf038aa6c29\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/9619cc7d97c3aa8ed3cfd2b8678b74fb6d6c7950\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/a01634bf91f2b6c42583770eb6815fb6d1e251cf\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/bc1660206c3723c37ed4d622ad81781f1e987250\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://git.kernel.org/stable/c/853262355518cd1247515b74e83fabf038aa6c29\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/a01634bf91f2b6c42583770eb6815fb6d1e251cf\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/48866fd5c361ea417ed24b43fc2a7dc2f5b060ef\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/9619cc7d97c3aa8ed3cfd2b8678b74fb6d6c7950\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/25df44e90ff5959b5c24ad361b648504a7e39ef3\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/6811744bd0efb9e472cb15d066cdb460beb8cb8a\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/bc1660206c3723c37ed4d622ad81781f1e987250\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/517a16b1a88bdb6b530f48d5d153478b2552d9a8\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-04T05:32:08.527Z\"}}, {\"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2021-47294\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-05-28T19:24:54.424642Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-05-28T19:25:07.753Z\"}, \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"title\": \"netrom: Decrease sock refcount when sock timers expire\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"ce29e8a259de767f7210d346ad2b031cb8ab2732\", \"lessThan\": \"853262355518cd1247515b74e83fabf038aa6c29\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"baa9e32336bf6d0d74a7c3486d2a27feaf57cd5f\", \"lessThan\": \"a01634bf91f2b6c42583770eb6815fb6d1e251cf\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"0adf571fa34b27bd0b97b408cc0f0dc54b72f0eb\", \"lessThan\": \"48866fd5c361ea417ed24b43fc2a7dc2f5b060ef\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"2c6b572458a9127e8070df13fa7f115c29ab1d92\", \"lessThan\": \"9619cc7d97c3aa8ed3cfd2b8678b74fb6d6c7950\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"63346650c1a94a92be61a57416ac88c0a47c4327\", \"lessThan\": \"25df44e90ff5959b5c24ad361b648504a7e39ef3\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"63346650c1a94a92be61a57416ac88c0a47c4327\", \"lessThan\": \"6811744bd0efb9e472cb15d066cdb460beb8cb8a\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"63346650c1a94a92be61a57416ac88c0a47c4327\", \"lessThan\": \"bc1660206c3723c37ed4d622ad81781f1e987250\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"63346650c1a94a92be61a57416ac88c0a47c4327\", \"lessThan\": \"517a16b1a88bdb6b530f48d5d153478b2552d9a8\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"f1d9a1f2ef6ff17293d21d5e6b80e04bea0cf508\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"519e8a22a454b1f1baa3a151b184fe51bc18e178\", \"versionType\": \"git\"}], \"programFiles\": [\"net/netrom/nr_timer.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"5.0\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"5.0\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"4.4.277\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.4.*\"}, {\"status\": \"unaffected\", \"version\": \"4.9.277\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.9.*\"}, {\"status\": \"unaffected\", \"version\": \"4.14.241\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.14.*\"}, {\"status\": \"unaffected\", \"version\": \"4.19.199\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.19.*\"}, {\"status\": \"unaffected\", \"version\": \"5.4.136\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.4.*\"}, {\"status\": \"unaffected\", \"version\": \"5.10.54\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.10.*\"}, {\"status\": \"unaffected\", \"version\": \"5.13.6\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.13.*\"}, {\"status\": \"unaffected\", \"version\": \"5.14\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"net/netrom/nr_timer.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/853262355518cd1247515b74e83fabf038aa6c29\"}, {\"url\": \"https://git.kernel.org/stable/c/a01634bf91f2b6c42583770eb6815fb6d1e251cf\"}, {\"url\": \"https://git.kernel.org/stable/c/48866fd5c361ea417ed24b43fc2a7dc2f5b060ef\"}, {\"url\": \"https://git.kernel.org/stable/c/9619cc7d97c3aa8ed3cfd2b8678b74fb6d6c7950\"}, {\"url\": \"https://git.kernel.org/stable/c/25df44e90ff5959b5c24ad361b648504a7e39ef3\"}, {\"url\": \"https://git.kernel.org/stable/c/6811744bd0efb9e472cb15d066cdb460beb8cb8a\"}, {\"url\": \"https://git.kernel.org/stable/c/bc1660206c3723c37ed4d622ad81781f1e987250\"}, {\"url\": \"https://git.kernel.org/stable/c/517a16b1a88bdb6b530f48d5d153478b2552d9a8\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nnetrom: Decrease sock refcount when sock timers expire\\n\\nCommit 63346650c1a9 (\\\"netrom: switch to sock timer API\\\") switched to use\\nsock timer API. It replaces mod_timer() by sk_reset_timer(), and\\ndel_timer() by sk_stop_timer().\\n\\nFunction sk_reset_timer() will increase the refcount of sock if it is\\ncalled on an inactive timer, hence, in case the timer expires, we need to\\ndecrease the refcount ourselves in the handler, otherwise, the sock\\nrefcount will be unbalanced and the sock will never be freed.\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.4.277\", \"versionStartIncluding\": \"4.4.173\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.9.277\", \"versionStartIncluding\": \"4.9.155\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.14.241\", \"versionStartIncluding\": \"4.14.98\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.19.199\", \"versionStartIncluding\": \"4.19.20\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.4.136\", \"versionStartIncluding\": \"5.0\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.10.54\", \"versionStartIncluding\": \"5.0\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.13.6\", \"versionStartIncluding\": \"5.0\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.14\", \"versionStartIncluding\": \"5.0\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"3.18.134\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"4.20.7\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2025-05-04T12:41:20.978Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2021-47294\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-05-04T12:41:20.978Z\", \"dateReserved\": \"2024-05-21T13:27:52.130Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-05-21T14:35:18.034Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.