{
  "cveId": "CVE-2021-47438",
  "url": "https://patchblox.com/security/cve/CVE-2021-47438",
  "summary": "CVE-2021-47438 is fixed in linux on 1 platform, first by DEBIAN-CVE-2021-47438, released May 22, 2024. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net/mlx5e: Fix memory leak in mlx5_core_destroy_...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path  Prior to this patch in case mlx5_core_destroy_cq() failed it returns without completing all destroy operations and that leads to memory leak. Instead, complete the destroy flow before return error.  Also move mlx5_debug_cq_remove() to the beginning of mlx5_core_destroy_cq() to be symmetrical with mlx5_core_create_cq().  kmemleak complains on:  unreferenced object 0xc000000038625100 (size 64):   comm \u0022ethtool\u0022, pid 28301, jiffies 4298062946 (age 785.380s)   hex dump (first 32 bytes):     60 01 48 94 00 00 00 c0 b8 05 34 c3 00 00 00 c0  \u0060.H.......4.....     02 00 00 00 00 00 00 00 00 db 7d c1 00 00 00 c0  ..........}.....   backtrace:     [\u003C000000009e8643cb\u003E] add_res_tree\u002B0xd0/0x270 [mlx5_core]     [\u003C00000000e7cb8e6c\u003E] mlx5_debug_cq_add\u002B0x5c/0xc0 [mlx5_core]     [\u003C000000002a12918f\u003E] mlx5_core_create_cq\u002B0x1d0/0x2d0 [mlx5_core]     [\u003C00000000cef0a696\u003E] mlx5e_create_cq\u002B0x210/0x3f0 [mlx5_core]     [\u003C000000009c642c26\u003E] mlx5e_open_cq\u002B0xb4/0x130 [mlx5_core]     [\u003C0000000058dfa578\u003E] mlx5e_ptp_open\u002B0x7f4/0xe10 [mlx5_core]     [\u003C0000000081839561\u003E] mlx5e_open_channels\u002B0x9cc/0x13e0 [mlx5_core]     [\u003C0000000009cf05d4\u003E] mlx5e_switch_priv_channels\u002B0xa4/0x230 [mlx5_core]     [\u003C0000000042bbedd8\u003E] mlx5e_safe_switch_params\u002B0x14c/0x300 [mlx5_core]     [\u003C0000000004bc9db8\u003E] set_pflag_tx_port_ts\u002B0x9c/0x160 [mlx5_core]     [\u003C00000000a0553443\u003E] mlx5e_set_priv_flags\u002B0xd0/0x1b0 [mlx5_core]     [\u003C00000000a8f3d84b\u003E] ethnl_set_privflags\u002B0x234/0x2d0     [\u003C00000000fd27f27c\u003E] genl_family_rcv_msg_doit\u002B0x108/0x1d0     [\u003C00000000f495e2bb\u003E] genl_family_rcv_msg\u002B0xe4/0x1f0     [\u003C00000000646c5c2c\u003E] genl_rcv_msg\u002B0x78/0x120     [\u003C00000000d53e384e\u003E] netlink_rcv_skb\u002B0x74/0x1a0",
  "published": "2024-05-22T07:15:09Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00235,
  "epssPercentile": 0.14581,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "5.14.16-1",
      "fix": "DEBIAN-CVE-2021-47438",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2021-47438",
      "released": "2024-05-22T07:15:09Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "5.14.16-1",
      "fix": "DEBIAN-CVE-2021-47438",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2021-47438",
      "released": "2024-05-22T07:15:09Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "5.14.16-1",
      "fix": "DEBIAN-CVE-2021-47438",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2021-47438",
      "released": "2024-05-22T07:15:09Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}