Loading story…
CVE-2021-47466 affects the Linux kernel's SLUB allocator in mm/slub.c, where the error path in kmem_cache_open() can fail to release a cache's random_seq resource after initialization fails. Introduced in kernel version 4.8, the flaw can cause a memory leak and potentially degrade system availability. It carries a CVSS v3.1 score of 5.5 and requires local access with low privileges.
Upstream fixes are available in kernel versions 5.4.156, 5.10.76, 5.14.15, and 5.15 and later; the Linux kernel CVE team recommends deploying a current stable kernel rather than backporting an individual patch. Red Hat remediated affected RHEL 8 kernel and kernel-rt packages through advisories RHSA-2024:7000 and RHSA-2024:7001. RHEL 9 and its real-time kernel are not affected, while unsupported RHEL 6 and 7 deployments should be treated as potentially vulnerable unless separately mitigated or upgraded.
See real exploitation activity before you spend the cycle.
4 events from the most recent confirmed update back to the earliest known activity.
Red Hat released RHSA-2024:7000 for the RHEL 8 kernel and RHSA-2024:7001 for the RHEL 8 kernel-rt package, addressing CVE-2021-47466.
Red Hat Bugzilla 2282890 was reported for the Linux kernel SLUB potential memory leak in kmem_cache_open().
Upstream fixes for CVE-2021-47466 were included in Linux kernel versions 5.4.156, 5.10.76, 5.14.15, and 5.15. The fix releases resources through __kmem_cache_release() when kmem_cache_open() initialization fails.
The SLUB allocator flaw was introduced in Linux kernel version 4.8 in mm/slub.c. On an initialization error path, a cache's random_seq resource could remain unreleased.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
3 references tracked. Mallory keeps watching after this page renders.
bugzilla.redhat.com
Open sourceredhat.com
Open sourcelore.kernel.org
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Red Hat addressed **CVE-2021-47287**, a Linux kernel driver-core flaw in `drivers/base/auxiliary.c` that leaks memory when `driver_register()` fails. In the affected `__auxiliary_driver_register()` path, memory allocated for `auxdrv->driver.name` was not released before the function returned, creating a local denial-of-service risk through resource exhaustion. Red Hat assigns the issue a CVSS 3.1 score of 5.5 (medium), with low-privilege local access required and availability as the affected security property. The defect was introduced in Linux kernel 5.11 and fixed upstream in versions 5.13.6 and 5.14. Red Hat released fixes for affected RHEL 8 `kernel` and `kernel-rt` packages through **RHSA-2024:7000** and **RHSA-2024:7001**; RHEL 6, 7, and 9 kernel variants are listed as not affected. Organizations running affected RHEL 8 systems should apply the advisory updates and reboot into the updated kernel; upstream recommends using the latest stable kernel release rather than cherry-picking the patch.
Aug 26, 2026
**CVE-2023-52662** is a low-severity memory-leak flaw in the Linux kernel's VMware graphics driver, `drm/vmwgfx`. In `vmw_gmrid_man_get_node`, failure of `ida_alloc_max` can leave `kmalloc`-allocated memory and resources initialized through `ttm_resource_init` unfreed, potentially causing a local, low-privileged user to exhaust system memory and affect availability. The issue was introduced in Linux kernel 5.14 and has a CVSS v3.1 score of 5.5. The flaw is fixed in upstream stable kernels 5.15.153, 6.1.83, 6.6.23, 6.7.11, 6.8.2, and 6.9. Red Hat released corrected standard and real-time kernel packages for RHEL 8 and standard kernel packages for RHEL 9, including RHEL 9.4 EUS; the RHEL 9 real-time kernel fix remains deferred. RHEL 6 and RHEL 7 kernel packages are outside support scope and should be treated as affected unless mitigated or upgraded. Organizations should deploy supported updated kernel packages and reboot affected hosts.
Aug 26, 2026
**CVE-2021-47338** is a use-after-free flaw in the Linux kernel framebuffer-memory (`fbmem`) subsystem. When `fb_delete_videomode()` deletes a video mode still in use, it fails to honor the result of `fbcon_mode_deleted()`, leaving later framebuffer ioctl handling able to access freed memory in `fb_mode_is_equal()`. The defect, introduced in kernel 5.3, can cause crashes or undefined behavior and was detected with KASAN. Red Hat rated the issue Moderate (CVSS 5.1 in its products), noting local access and high privileges are required, while NVD/cve.org assigned 7.8. Affected RHEL 8 `kernel` and `kernel-rt` packages were corrected through **RHSA-2024:7000** and **RHSA-2024:7001**; RHEL 6, 7, and 9 kernel variants are listed as unaffected. Upstream fixes are available in kernels 5.4.134, 5.10.52, 5.12.19, 5.13.4, and 5.14, and administrators should deploy a current supported kernel because no practical mitigation is identified.
Aug 26, 2026