CVE-2021-47585

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

btrfs: fix memory leak in __add_inode_ref()

Line 1169 (#3) allocates a memory chunk for victim_name by kmalloc(),

but when the function returns in line 1184 (#4) victim_name allocated

by line 1169 (#3) is not freed, which will lead to a memory leak.

There is a similar snippet of code in this function as allocating a memory

chunk for victim_name in line 1104 (#1) as well as releasing the memory

in line 1116 (#2).

We should kfree() victim_name when the return value of backref_in_log()

is less than zero and before the function returns in line 1184 (#4).

1057 static inline int __add_inode_ref(struct btrfs_trans_handle *trans,

1058 struct btrfs_root *root,

1059 struct btrfs_path *path,

1060 struct btrfs_root *log_root,

1061 struct btrfs_inode *dir,

1062 struct btrfs_inode *inode,

1063 u64 inode_objectid, u64 parent_objectid,

1064 u64 ref_index, char *name, int namelen,

1065

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

References