{"id":"DEBIAN-CVE-2021-47438","details":"In the Linux kernel, the following vulnerability has been resolved:  net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path  Prior to this patch in case mlx5_core_destroy_cq() failed it returns without completing all destroy operations and that leads to memory leak. Instead, complete the destroy flow before return error.  Also move mlx5_debug_cq_remove() to the beginning of mlx5_core_destroy_cq() to be symmetrical with mlx5_core_create_cq().  kmemleak complains on:  unreferenced object 0xc000000038625100 (size 64):   comm \"ethtool\", pid 28301, jiffies 4298062946 (age 785.380s)   hex dump (first 32 bytes):     60 01 48 94 00 00 00 c0 b8 05 34 c3 00 00 00 c0  `.H.......4.....     02 00 00 00 00 00 00 00 00 db 7d c1 00 00 00 c0  ..........}.....   backtrace:     [\u003c000000009e8643cb\u003e] add_res_tree+0xd0/0x270 [mlx5_core]     [\u003c00000000e7cb8e6c\u003e] mlx5_debug_cq_add+0x5c/0xc0 [mlx5_core]     [\u003c000000002a12918f\u003e] mlx5_core_create_cq+0x1d0/0x2d0 [mlx5_core]     [\u003c00000000cef0a696\u003e] mlx5e_create_cq+0x210/0x3f0 [mlx5_core]     [\u003c000000009c642c26\u003e] mlx5e_open_cq+0xb4/0x130 [mlx5_core]     [\u003c0000000058dfa578\u003e] mlx5e_ptp_open+0x7f4/0xe10 [mlx5_core]     [\u003c0000000081839561\u003e] mlx5e_open_channels+0x9cc/0x13e0 [mlx5_core]     [\u003c0000000009cf05d4\u003e] mlx5e_switch_priv_channels+0xa4/0x230 [mlx5_core]     [\u003c0000000042bbedd8\u003e] mlx5e_safe_switch_params+0x14c/0x300 [mlx5_core]     [\u003c0000000004bc9db8\u003e] set_pflag_tx_port_ts+0x9c/0x160 [mlx5_core]     [\u003c00000000a0553443\u003e] mlx5e_set_priv_flags+0xd0/0x1b0 [mlx5_core]     [\u003c00000000a8f3d84b\u003e] ethnl_set_privflags+0x234/0x2d0     [\u003c00000000fd27f27c\u003e] genl_family_rcv_msg_doit+0x108/0x1d0     [\u003c00000000f495e2bb\u003e] genl_family_rcv_msg+0xe4/0x1f0     [\u003c00000000646c5c2c\u003e] genl_rcv_msg+0x78/0x120     [\u003c00000000d53e384e\u003e] netlink_rcv_skb+0x74/0x1a0","modified":"2026-09-15T09:02:38.223081654Z","published":"2024-05-22T07:15:09.080Z","upstream":["CVE-2021-47438"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2021-47438"}],"affected":[{"package":{"name":"linux","ecosystem":"Debian:12","purl":"pkg:deb/debian/linux?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.16-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2021-47438.json"}},{"package":{"name":"linux","ecosystem":"Debian:13","purl":"pkg:deb/debian/linux?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.16-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2021-47438.json"}},{"package":{"name":"linux","ecosystem":"Debian:14","purl":"pkg:deb/debian/linux?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.16-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2021-47438.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}]}