CVE-2021-47319

virtio-blk: Fix memory leak among suspend/resume procedure

MEDIUM

5.5

CVSS Score

Published: May 21, 2024 at 02:35 PM UTC

Updated: June 17, 2026 at 04:17 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.3%

SSVC

No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: virtio-blk: Fix memory leak among suspend/resume procedure The vblk->vqs should be freed before we call init_vqs() in virtblk_restore().

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

v < 4.4.2763.17 ≤ v < 4.14.2403.17 ≤ v < 4.19.1983.17 ≤ v < 4.4.2763.17 ≤ v < 4.9.2763.17 ≤ v < 5.10.523.17 ≤ v < 5.12.193.17 ≤ v < 5.13.43.17 ≤ v < 5.143.17 ≤ v < 5.4.1344.10 ≤ v < 4.14.2404.15 ≤ v < 4.19.1984.20 ≤ v < 5.4.1344.5 ≤ v < 4.9.2765.11 ≤ v < 5.12.195.13 ≤ v < 5.13.45.5 ≤ v < 5.10.523.176a27b656fc0210e976db362e1368c56db05c8f08

Vendor states this is fixed in 04c6e60b884cb5e94ff32af46867fb41d5848358 (fixed)

Vendor states this is fixed in 102d6bc6475ab09bab579c18704e6cf8d898e93c (fixed)

Vendor states this is fixed in 29a2f4a3214aa14d61cc9737c9f886dae9dbb710 (fixed)

Vendor states this is fixed in 381bde79d11e596002edfd914e6714291826967a (fixed)

Vendor states this is fixed in 600942d2fd49b90e44857d20c774b20d16f3130f (fixed)

Vendor states this is fixed in 863da837964c80c72e368a4f748c30d25daa1815 (fixed)

Vendor states this is fixed in b71ba22e7c6c6b279c66f53ee7818709774efa1f (fixed)

Vendor states this is fixed in ca2b8ae93a6da9839dc7f9eb9199b18aa03c3dae (fixed)

Vendor states this is fixed in cd24da0db9f75ca11eaf6060f0ccb90e2f3be3b0 (fixed)

Vendor states this is fixed in 3.17 (unaffected)

Vendor states this is fixed in 4.14.240 (unaffected)

Vendor states this is fixed in 4.19.198 (unaffected)

Vendor states this is fixed in 4.4.276 (unaffected)

Vendor states this is fixed in 4.9.276 (unaffected)

Vendor states this is fixed in 5.10.52 (unaffected)

Vendor states this is fixed in 5.12.19 (unaffected)

Vendor states this is fixed in 5.13.4 (unaffected)

Vendor states this is fixed in 5.14 (unaffected)

Vendor states this is fixed in 5.4.134 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references