CVE-2021-47024

EUVD-2021-33672
In the Linux kernel, the following vulnerability has been resolved:

vsock/virtio: free queued packets when closing socket

As reported by syzbot [1], there is a memory leak while closing the
socket. We partially solved this issue with commit ac03046ece2b
("vsock/virtio: free packets during the socket release"), but we
forgot to drain the RX queue when the socket is definitely closed by
the scheduled work.

To avoid future issues, let's use the new virtio_transport_remove_sock()
to drain the RX queue before removing the socket from the af_vsock lists
calling vsock_remove_sock().

[1] https://syzkaller.appspot.com/bug?extid=24452624fc4c571eedd9
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.5 MEDIUM
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 4%
Affected Products (NVD)
VendorProductVersion
linuxlinux_kernel
5.2 ≤
𝑥
< 5.10.37
linuxlinux_kernel
5.11 ≤
𝑥
< 5.11.21
linuxlinux_kernel
5.12 ≤
𝑥
< 5.12.4
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
linux
bookworm
6.1.106-3
fixed
bookworm (security)
6.1.112-1
fixed
bullseye
5.10.223-1
fixed
bullseye (security)
5.10.226-1
fixed
sid
6.11.6-1
fixed
trixie
6.11.5-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
linux
bionic
ignored
focal
needed
jammy
not-affected
mantic
not-affected
noble
not-affected
trusty
not-affected
xenial
not-affected
linux-allwinner-5.19
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-aws
bionic
ignored
focal
needed
jammy
not-affected
mantic
not-affected
noble
not-affected
trusty
not-affected
xenial
not-affected
linux-aws-5.0
bionic
ignored
focal
dne
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-aws-5.11
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-aws-5.13
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-aws-5.15
bionic
dne
focal
not-affected
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-aws-5.19
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-aws-5.3
bionic
ignored
focal
dne
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-aws-5.4
bionic
ignored
focal
dne
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-aws-5.8
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-aws-6.2
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-aws-6.5
bionic
dne
focal
dne
jammy
not-affected
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-aws-fips
bionic
dne
focal
dne
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-aws-hwe
bionic
dne
focal
dne
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
ignored
linux-azure
bionic
ignored
focal
needed
jammy
not-affected
mantic
not-affected
noble
not-affected
trusty
ignored
xenial
ignored
linux-azure-4.15
bionic
ignored
focal
dne
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-azure-5.11
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-azure-5.13
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-azure-5.15
bionic
dne
focal
not-affected
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-azure-5.19
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-azure-5.3
bionic
ignored
focal
dne
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-azure-5.4
bionic
ignored
focal
dne
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-azure-5.8
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-azure-6.2
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-azure-6.5
bionic
dne
focal
dne
jammy
not-affected
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-azure-edge
bionic
ignored
focal
dne
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-azure-fde
bionic
dne
focal
ignored
jammy
not-affected
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-azure-fde-5.15
bionic
dne
focal
not-affected
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-azure-fde-5.19
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-azure-fde-6.2
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-azure-fips
bionic
dne
focal
dne
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-bluefield
bionic
dne
focal
needed
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-dell300x
bionic
ignored
focal
dne
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-fips
bionic
dne
focal
dne
jammy
dne
mantic
dne
noble
dne
trusty
ignored
xenial
ignored
linux-gcp
bionic
ignored
focal
needed
jammy
not-affected
mantic
not-affected
noble
not-affected
trusty
dne
xenial
ignored
linux-gcp-4.15
bionic
ignored
focal
dne
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-gcp-5.11
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-gcp-5.13
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-gcp-5.15
bionic
dne
focal
not-affected
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-gcp-5.19
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-gcp-5.3
bionic
ignored
focal
dne
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-gcp-5.4
bionic
ignored
focal
dne
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-gcp-5.8
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-gcp-6.2
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-gcp-6.5
bionic
dne
focal
dne
jammy
not-affected
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-gcp-fips
bionic
dne
focal
dne
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-gke
bionic
dne
focal
ignored
jammy
not-affected
mantic
dne
noble
not-affected
trusty
dne
xenial
ignored
linux-gke-4.15
bionic
ignored
focal
dne
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-gke-5.0
bionic
ignored
focal
dne
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-gke-5.15
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-gke-5.3
bionic
ignored
focal
dne
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-gke-5.4
bionic
ignored
focal
dne
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-gkeop
bionic
dne
focal
needed
jammy
not-affected
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-gkeop-5.15
bionic
dne
focal
not-affected
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-gkeop-5.4
bionic
ignored
focal
dne
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-hwe
bionic
ignored
focal
dne
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
ignored
linux-hwe-5.11
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-hwe-5.13
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-hwe-5.15
bionic
dne
focal
not-affected
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-hwe-5.19
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-hwe-5.4
bionic
ignored
focal
dne
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-hwe-5.8
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-hwe-6.2
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-hwe-6.5
bionic
dne
focal
dne
jammy
not-affected
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-hwe-6.8
bionic
dne
focal
dne
jammy
not-affected
noble
dne
trusty
dne
xenial
dne
linux-hwe-edge
bionic
ignored
focal
dne
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
ignored
linux-ibm
bionic
dne
focal
needed
jammy
not-affected
mantic
ignored
noble
not-affected
trusty
dne
xenial
dne
linux-ibm-5.15
bionic
dne
focal
not-affected
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-ibm-5.4
bionic
ignored
focal
dne
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-intel
bionic
dne
focal
dne
jammy
dne
mantic
dne
noble
not-affected
trusty
dne
xenial
dne
linux-intel-5.13
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-intel-iot-realtime
bionic
dne
focal
dne
jammy
dne
noble
dne
trusty
dne
xenial
dne
linux-intel-iotg
bionic
dne
focal
dne
jammy
not-affected
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-intel-iotg-5.15
bionic
dne
focal
not-affected
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-iot
bionic
dne
focal
needed
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-kvm
bionic
ignored
focal
needed
jammy
not-affected
mantic
dne
noble
dne
trusty
dne
xenial
not-affected
linux-laptop
bionic
dne
focal
dne
jammy
dne
mantic
not-affected
noble
dne
trusty
dne
xenial
dne
linux-lowlatency
bionic
dne
focal
dne
jammy
not-affected
mantic
not-affected
noble
not-affected
trusty
dne
xenial
dne
linux-lowlatency-hwe-5.15
bionic
dne
focal
not-affected
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-lowlatency-hwe-5.19
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-lowlatency-hwe-6.2
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-lowlatency-hwe-6.5
bionic
dne
focal
dne
jammy
not-affected
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-lowlatency-hwe-6.8
bionic
dne
focal
dne
jammy
not-affected
noble
dne
trusty
dne
xenial
dne
linux-lts-xenial
bionic
dne
focal
dne
jammy
dne
mantic
dne
noble
dne
trusty
not-affected
xenial
dne
linux-nvidia
bionic
dne
focal
dne
jammy
not-affected
mantic
dne
noble
not-affected
trusty
dne
xenial
dne
linux-nvidia-6.2
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-nvidia-6.5
bionic
dne
focal
dne
jammy
not-affected
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-nvidia-6.8
bionic
dne
focal
dne
jammy
not-affected
noble
dne
trusty
dne
xenial
dne
linux-nvidia-lowlatency
bionic
dne
focal
dne
jammy
dne
noble
not-affected
trusty
dne
xenial
dne
linux-oem
bionic
ignored
focal
dne
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
ignored
linux-oem-5.10
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-oem-5.13
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-oem-5.14
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-oem-5.17
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-oem-5.6
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-oem-6.0
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-oem-6.1
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-oem-6.5
bionic
dne
focal
dne
jammy
not-affected
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-oem-6.8
bionic
dne
focal
dne
jammy
dne
mantic
dne
noble
not-affected
trusty
dne
xenial
dne
linux-oem-osp1
bionic
ignored
focal
dne
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-oracle
bionic
ignored
focal
needed
jammy
not-affected
mantic
not-affected
noble
not-affected
trusty
dne
xenial
ignored
linux-oracle-5.0
bionic
ignored
focal
dne
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-oracle-5.11
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-oracle-5.13
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-oracle-5.15
bionic
dne
focal
not-affected
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-oracle-5.3
bionic
ignored
focal
dne
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-oracle-5.4
bionic
ignored
focal
dne
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-oracle-5.8
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-oracle-6.5
bionic
dne
focal
dne
jammy
not-affected
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-raspi
bionic
dne
focal
needed
jammy
not-affected
mantic
not-affected
noble
not-affected
trusty
dne
xenial
dne
linux-raspi-5.4
bionic
ignored
focal
dne
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-raspi-realtime
bionic
dne
focal
dne
jammy
dne
noble
dne
trusty
dne
xenial
dne
linux-raspi2
bionic
ignored
focal
ignored
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
ignored
linux-raspi2-5.3
bionic
ignored
focal
dne
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-realtime
bionic
dne
focal
dne
jammy
ignored
noble
dne
trusty
dne
xenial
dne
linux-riscv
bionic
dne
focal
ignored
jammy
ignored
mantic
not-affected
noble
not-affected
trusty
dne
xenial
dne
linux-riscv-5.11
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-riscv-5.15
bionic
dne
focal
not-affected
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-riscv-5.19
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-riscv-5.8
bionic
dne
focal
ignored
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-riscv-6.5
bionic
dne
focal
dne
jammy
not-affected
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-riscv-6.8
bionic
dne
focal
dne
jammy
not-affected
noble
dne
trusty
dne
xenial
dne
linux-snapdragon
bionic
ignored
focal
dne
jammy
dne
mantic
dne
noble
dne
trusty
dne
xenial
ignored
linux-starfive
bionic
dne
focal
dne
jammy
dne
mantic
not-affected
noble
dne
trusty
dne
xenial
dne
linux-starfive-5.19
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-starfive-6.2
bionic
dne
focal
dne
jammy
ignored
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-starfive-6.5
bionic
dne
focal
dne
jammy
not-affected
mantic
dne
noble
dne
trusty
dne
xenial
dne
linux-xilinx-zynqmp
bionic
dne
focal
needed
jammy
not-affected
mantic
dne
noble
dne
trusty
dne
xenial
dne