CVE-2021-47367: virtio-net: fix pages leaking when building skb in big mode

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-05-21 · updated 2026-06-17
Weakness: CWE-119

Description

In the Linux kernel, the following vulnerability has been resolved: virtio-net: fix pages leaking when building skb in big mode We try to use build_skb() if we had sufficient tailroom. But we forget to release the unused pages chained via private in big mode which will leak pages. Fixing this by release the pages after building the skb in big mode.

Affected products

Linux kernel: from 5.13 before 5.14.9; 5.15-rc1, 5.15-rc2 — fixed in 5.14.9

How to fix

Upgrade to a fixed version: Linux kernel 5.14.9. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/afd92d82c9d715fb97565408755acad81573591a
https://git.kernel.org/stable/c/f020bb63b5d2e5576acadd10e158fe3b04af67ba
https://git.kernel.org/stable/c/afd92d82c9d715fb97565408755acad81573591a
https://git.kernel.org/stable/c/f020bb63b5d2e5576acadd10e158fe3b04af67ba

Get alerted when CVE-2021-47367 or the next vulnerability affects your stack