What’s Vulnerable › Vulnerabilities

CVE-2021-47514: devlink: fix netns refcount leak in devlink_nl_cmd_reload()

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-05-24 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: devlink: fix netns refcount leak in devlink_nl_cmd_reload() While preparing my patch series adding netns refcount tracking, I spotted bugs in devlink_nl_cmd_reload() Some error paths forgot to release a refcount on a netns. To fix this, we can reduce the scope of get_net()/put_net() section around the call to devlink_reload().

Affected products

• Linux kernel: from 5.10 before 5.10.85; from 5.11 before 5.15.8; 5.16-rc1, 5.16-rc2, 5.16-rc3, 5.16-rc4 — fixed in 5.10.85, 5.15.8

How to fix

Upgrade to a fixed version: Linux kernel 5.10.85, 5.15.8. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/4b7e90672af8e0c78205db006f1b0a20ebd07f5f
• https://git.kernel.org/stable/c/4dbb0dad8e63fcd0b5a117c2861d2abe7ff5f186
• https://git.kernel.org/stable/c/fe30b70ca84da9c4aca85c03ad86e7a9b89c5ded
• https://git.kernel.org/stable/c/4b7e90672af8e0c78205db006f1b0a20ebd07f5f
• https://git.kernel.org/stable/c/4dbb0dad8e63fcd0b5a117c2861d2abe7ff5f186
• https://git.kernel.org/stable/c/fe30b70ca84da9c4aca85c03ad86e7a9b89c5ded

Get alerted when CVE-2021-47514 or the next vulnerability affects your stack