CVE-2021-47438 is a memory leak vulnerability in the Linux kernel's mlx5e network driver, specifically within the mlx5_core_destroy_cq() function. This flaw occurs when the function fails, leading to incomplete deallocation of resources and a memory leak. It affects the Linux kernel and its associated products. Rated with a CVSS score of 5.5 (Medium), this vulnerability has a local attack vector (AV:L) and low attack complexity (AC:L), requiring local privileges (PR:L). The primary impact is high availability degradation (A:H) due to resource exhaustion, with no impact on confidentiality or integrity. There is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, indicating a low level of public attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 3.11, < 5.10.75CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 5.11, < 5.14.14CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
5.15CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:5.15:rc1:*:*:*:*:*:* | ||
5.15CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:5.15:rc2:*:*:*:*:*:* | ||
5.15CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:5.15:rc3:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.