CVE-2021-47295: Linux Kernel

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: net: sched: fix memory leak in tcindex_partial_destroy_work Syzbot reported memory leak in tcindex_set_parms(). The problem was in non-freed perfect hash in tcindex_partial_destroy_work(). In tcindex_set_parms() new tcindex_data is allocated and some fields from old one are copied to new one, but not the perfect hash. Since tcindex_partial_destroy_work() is the destroy function for old tcindex_data, we need to free perfect hash to avoid memory leak.

Affected products

• Linux Linux Kernel: from 3.18, before 5.4.136 (fixed in 5.4.136); from 5.5, before 5.10.54 (fixed in 5.10.54); from 5.11, before 5.13.6 (fixed in 5.13.6); version 5.14 only

Published 2024-05-21. Last modified 2026-06-17.