CVE-2021-47238: net: ipv4: fix memory leak in ip_mc_add1_src

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• linux linux kernel3.2.87 and later · before 3.3
• linux linux kernel3.16.42 and later · before 3.17
• linux linux kernel4.9 and later · before 4.9.274
• linux linux kernel4.10 and later · before 4.14.238
• linux linux kernel4.15 and later · before 4.19.196
• linux linux kernel4.20 and later · before 5.4.128
• linux linux kernel5.5 and later · before 5.10.46
• linux linux kernel5.11 and later · before 5.12.13
• linux linux kernel5.13

Versions reported by the vendor

Affected version ranges reported by the assigning authority (Linux). Independent of NVD's CPE analysis and usually ahead of it.

• Linux Linux

  • bd1b664a19403ede448d29c87b2f23796bc7a577, b38c6e0bd5b5e439ecebdc0df599d573c2f610f8, 4.9affected
  • 24803f38a5c0b6c57ed800b47e695f9ce474bc3a and later · before 0dc13e75507faa17ac9f7562b4ef7bf8fcd78422affected · git
  • 24803f38a5c0b6c57ed800b47e695f9ce474bc3a and later · before 6cff57eea3347f79f1867cc53e1093b6614138d8affected · git
  • 24803f38a5c0b6c57ed800b47e695f9ce474bc3a and later · before 1e28018b5c83d5073f74a6fb72eabe8370b2f501affected · git
  • 24803f38a5c0b6c57ed800b47e695f9ce474bc3a and later · before 3dd2aeac2e9624cff9fa634710837e4f2e352758affected · git
  • 24803f38a5c0b6c57ed800b47e695f9ce474bc3a and later · before ac31cc837cafb57a271babad8ccffbf733caa076affected · git
  • 24803f38a5c0b6c57ed800b47e695f9ce474bc3a and later · before 77de6ee73f54a9a89c0afa0bf4c53b239aa9953aaffected · git
  • 24803f38a5c0b6c57ed800b47e695f9ce474bc3a and later · before d8e2973029b8b2ce477b564824431f3385c77083affected · git
  • 3.2.87 and later · before 3.3affected · semver
  • 3.16.42 and later · before 3.17affected · semver

Package-level exposure

OSV and GitHub Advisory data: ecosystem, package and range. SBOM matching uses this table.

Other highest-scoring records for the same primary product.

• CVE-2026-31431crypto: algif_aead - Revert to operating out-of-placeKEV
  90Now
• CVE-2022-0847A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe…KEV
  89Now
• CVE-2021-22555Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACEKEV
  85Now

Published before and after this one in the same product

• ← EarlierCVE-2021-47236May 21, 2024 · net: cdc_eem: fix tx fixup skb leak
  22Monitor
• ← EarlierCVE-2021-47237May 21, 2024 · net: hamradio: fix memory leak in mkiss_close
  22Monitor
• Later →CVE-2021-47239May 21, 2024 · net: usb: fix possible use-after-free in smsc75xx_bind
  31Monitor

Root cause

Code that parses nested structures sets no depth or size limit. A small input can turn into a disproportionate processing load.

A representative example of this vulnerability class. Not the vendor's source code; it shows the faulty pattern and its fix.

1function expand(node) {2  return node.children.map(expand);3}

1const MAX_DEPTH = 32;2function expand(node, depth = 0) {3  if (depth > MAX_DEPTH) throw new Error("too deep");4  return node.children.map((c) => expand(c, depth + 1));5}

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.