[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2021-47304":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T08:53:30.047Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":21,"duplicate_of":9,"upstream":22,"downstream":23,"duplicates":32,"related":33,"reserved_at":9,"published_at":34,"modified_at":35,"state":36,"summary":37,"references_raw":46,"kevs":61,"epss":62,"epss_history":65,"metrics":306,"affected":312},"CVE-2021-47304","In the Linux kernel, the following vulnerability has been resolved:\n\ntcp: fix tcp_init_transfer() to not reset icsk_ca_initialized\n\nThis commit fixes a bug (found by syzkaller) that could cause spurious\ndouble-initializations for congestion control modules, which could cause\nmemory leaks or other problems for congestion control modules (like CDG)\nthat allocate memory in their init functions.\n\nThe buggy scenario constructed by syzkaller was something like:\n\n(1) create a TCP socket\n(2) initiate a TFO connect via sendto()\n(3) while socket is in TCP_SYN_SENT, call setsockopt(TCP_CONGESTION),\n    which calls:\n       tcp_set_congestion_control() ->\n         tcp_reinit_congestion_control() ->\n           tcp_init_congestion_control()\n(4) receive ACK, connection is established, call tcp_init_transfer(),\n    set icsk_ca_initialized=0 (without first calling cc->release()),\n    call tcp_init_congestion_control() again.\n\nNote that in this sequence tcp_init_congestion_control() is called\ntwice without a cc->release() call in between. Thus, for CC modules\nthat allocate memory in their init() function, e.g, CDG, a memory leak\nmay occur. The syzkaller tool managed to find a reproducer that\ntriggered such a leak in CDG.\n\nThe bug was introduced when that commit 8919a9b31eb4 (\"tcp: Only init\ncongestion control if not initialized already\")\nintroduced icsk_ca_initialized and set icsk_ca_initialized to 0 in\ntcp_init_transfer(), missing the possibility for a sequence like the\none above, where a process could call setsockopt(TCP_CONGESTION) in\nstate TCP_SYN_SENT (i.e. after the connect() or TFO open sendmsg()),\nwhich would call tcp_init_congestion_control(). It did not intend to\nreset any initialization that the user had already explicitly made;\nit just missed the possibility of that particular sequence (which\nsyzkaller managed to find).",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-415","Double Free","The product calls free() twice on the same memory address.","weakness","Draft","Variant","High",[],[],[],[],[24,26,28,30],{"_key":25},"UBUNTU-CVE-2021-47304",{"_key":27},"DEBIAN-CVE-2021-47304",{"_key":29},"RHSA-2024:5101",{"_key":31},"RHSA-2024:5102",[],[],"2024-05-21T14:35:24.670Z","2026-05-11T13:51:54.060Z","Analyzed",{"cisa_kev":38,"cisa_ransomware":38,"cisa_vendor":9,"epss_severity":39,"epss_score":40,"severity":41,"severity_score":42,"severity_version":43,"severity_source":44,"severity_vector":45,"severity_status":36},false,"low",0.00015,"medium",5.5,"v3.1","nvd","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",[47,53,57],{"url":48,"sources":49,"tags":51},"https://git.kernel.org/stable/c/ad4ba3404931745a5977ad12db4f0c34080e52f7",[50,44],"cve.org",[52],"Patch",{"url":54,"sources":55,"tags":56},"https://git.kernel.org/stable/c/fe77b85828ca9ddc42977b79de9e40d18545b4fe",[50,44],[52],{"url":58,"sources":59,"tags":60},"https://git.kernel.org/stable/c/be5d1b61a2ad28c7e57fe8bfa277373e8ecffcdc",[50,44],[52],[],{"date":63,"score":40,"percentile":64},"2026-06-03",0.03325,[66,70,73,76,79,81,84,86,89,92,95,97,99,101,104,108,111,114,117,120,123,125,127,129,131,133,136,139,142,144,147,150,153,156,158,161,164,167,170,173,175,177,180,183,185,188,190,192,194,196,198,200,202,205,208,210,212,214,217,219,222,225,227,229,232,234,236,239,242,245,248,251,254,257,260,263,266,269,272,275,278,281,283,286,289,291,294,297,300,303],{"date":67,"score":68,"percentile":69},"2025-11-04",0.00009,0.00598,{"date":71,"score":68,"percentile":72},"2025-11-05",0.00599,{"date":74,"score":68,"percentile":75},"2025-11-06",0.00601,{"date":77,"score":68,"percentile":78},"2025-11-07",0.00602,{"date":80,"score":68,"percentile":78},"2025-11-08",{"date":82,"score":68,"percentile":83},"2025-11-09",0.006,{"date":85,"score":68,"percentile":69},"2025-11-10",{"date":87,"score":68,"percentile":88},"2025-11-11",0.00597,{"date":90,"score":68,"percentile":91},"2025-11-12",0.00594,{"date":93,"score":68,"percentile":94},"2025-11-13",0.00593,{"date":96,"score":68,"percentile":88},"2025-11-14",{"date":98,"score":68,"percentile":83},"2025-11-15",{"date":100,"score":68,"percentile":72},"2025-11-16",{"date":102,"score":68,"percentile":103},"2025-11-17",0.00596,{"date":105,"score":106,"percentile":107},"2025-11-18",0.00073,0.18347,{"date":109,"score":106,"percentile":110},"2025-11-19",0.18365,{"date":112,"score":106,"percentile":113},"2025-11-20",0.18343,{"date":115,"score":68,"percentile":116},"2025-11-21",0.0061,{"date":118,"score":68,"percentile":119},"2025-11-22",0.00608,{"date":121,"score":68,"percentile":122},"2025-11-23",0.00605,{"date":124,"score":68,"percentile":78},"2025-11-24",{"date":126,"score":68,"percentile":75},"2025-11-25",{"date":128,"score":68,"percentile":91},"2025-11-26",{"date":130,"score":68,"percentile":94},"2025-11-27",{"date":132,"score":68,"percentile":88},"2025-11-28",{"date":134,"score":68,"percentile":135},"2025-11-29",0.00611,{"date":137,"score":68,"percentile":138},"2025-11-30",0.00613,{"date":140,"score":68,"percentile":141},"2025-12-01",0.00615,{"date":143,"score":68,"percentile":138},"2025-12-02",{"date":145,"score":68,"percentile":146},"2025-12-03",0.00617,{"date":148,"score":68,"percentile":149},"2025-12-04",0.0062,{"date":151,"score":68,"percentile":152},"2025-12-05",0.00628,{"date":154,"score":68,"percentile":155},"2025-12-06",0.00626,{"date":157,"score":68,"percentile":155},"2025-12-07",{"date":159,"score":68,"percentile":160},"2025-12-08",0.0063,{"date":162,"score":68,"percentile":163},"2025-12-09",0.00643,{"date":165,"score":68,"percentile":166},"2025-12-10",0.00653,{"date":168,"score":68,"percentile":169},"2025-12-11",0.00651,{"date":171,"score":68,"percentile":172},"2025-12-12",0.00652,{"date":174,"score":68,"percentile":172},"2025-12-13",{"date":176,"score":68,"percentile":172},"2025-12-14",{"date":178,"score":68,"percentile":179},"2025-12-15",0.00645,{"date":181,"score":68,"percentile":182},"2025-12-16",0.00649,{"date":184,"score":68,"percentile":169},"2025-12-17",{"date":186,"score":68,"percentile":187},"2025-12-18",0.0065,{"date":189,"score":68,"percentile":187},"2025-12-19",{"date":191,"score":68,"percentile":187},"2025-12-20",{"date":193,"score":68,"percentile":182},"2025-12-21",{"date":195,"score":68,"percentile":169},"2025-12-22",{"date":197,"score":68,"percentile":169},"2025-12-23",{"date":199,"score":68,"percentile":166},"2025-12-24",{"date":201,"score":68,"percentile":166},"2025-12-25",{"date":203,"score":68,"percentile":204},"2025-12-26",0.00657,{"date":206,"score":68,"percentile":207},"2025-12-27",0.00655,{"date":209,"score":68,"percentile":207},"2025-12-28",{"date":211,"score":68,"percentile":166},"2025-12-29",{"date":213,"score":68,"percentile":172},"2025-12-30",{"date":215,"score":68,"percentile":216},"2025-12-31",0.00648,{"date":218,"score":68,"percentile":169},"2026-01-01",{"date":220,"score":68,"percentile":221},"2026-01-02",0.00656,{"date":223,"score":68,"percentile":224},"2026-01-03",0.00658,{"date":226,"score":68,"percentile":187},"2026-01-04",{"date":228,"score":68,"percentile":166},"2026-01-05",{"date":230,"score":68,"percentile":231},"2026-01-06",0.00654,{"date":233,"score":68,"percentile":172},"2026-01-07",{"date":235,"score":68,"percentile":204},"2026-01-08",{"date":237,"score":68,"percentile":238},"2026-01-09",0.00664,{"date":240,"score":68,"percentile":241},"2026-01-10",0.00665,{"date":243,"score":40,"percentile":244},"2026-01-11",0.02432,{"date":246,"score":40,"percentile":247},"2026-01-12",0.02402,{"date":249,"score":40,"percentile":250},"2026-01-13",0.02391,{"date":252,"score":40,"percentile":253},"2026-01-14",0.02396,{"date":255,"score":40,"percentile":256},"2026-01-15",0.02389,{"date":258,"score":40,"percentile":259},"2026-01-16",0.02383,{"date":261,"score":40,"percentile":262},"2026-01-17",0.02387,{"date":264,"score":40,"percentile":265},"2026-01-18",0.02393,{"date":267,"score":40,"percentile":268},"2026-01-19",0.02379,{"date":270,"score":40,"percentile":271},"2026-01-20",0.02366,{"date":273,"score":40,"percentile":274},"2026-01-21",0.02361,{"date":276,"score":40,"percentile":277},"2026-01-22",0.02359,{"date":279,"score":40,"percentile":280},"2026-01-23",0.02368,{"date":282,"score":40,"percentile":250},"2026-01-24",{"date":284,"score":40,"percentile":285},"2026-01-25",0.02384,{"date":287,"score":40,"percentile":288},"2026-01-26",0.0238,{"date":290,"score":40,"percentile":285},"2026-01-27",{"date":292,"score":40,"percentile":293},"2026-01-28",0.02388,{"date":295,"score":40,"percentile":296},"2026-01-29",0.02408,{"date":298,"score":40,"percentile":299},"2026-01-30",0.02416,{"date":301,"score":40,"percentile":302},"2026-01-31",0.02439,{"date":304,"score":40,"percentile":305},"2026-02-01",0.02493,[307],{"source":44,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":308,"cvss_v4_0":9},{"baseScore":42,"baseSeverity":309,"vectorString":45,"impactScore":310,"exploitabilityScore":311},"MEDIUM",6,4.6,[313,333],{"ecosystem":9,"name":314,"vendor":315,"product":315,"cpe_part":316,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":317},"Linux","linux","a",[318,325,328,331],{"version":319,"is_range":320,"range_type":50,"version_start":321,"version_start_type":322,"version_end":323,"version_end_type":324,"fixed_in":9},">= 8919a9b31eb4fb4c0a93e5fb350a626924302aa6, \u003C ad4ba3404931745a5977ad12db4f0c34080e52f7",true,"8919a9b31eb4fb4c0a93e5fb350a626924302aa6","including","ad4ba3404931745a5977ad12db4f0c34080e52f7","excluding",{"version":326,"is_range":320,"range_type":50,"version_start":321,"version_start_type":322,"version_end":327,"version_end_type":324,"fixed_in":9},">= 8919a9b31eb4fb4c0a93e5fb350a626924302aa6, \u003C fe77b85828ca9ddc42977b79de9e40d18545b4fe","fe77b85828ca9ddc42977b79de9e40d18545b4fe",{"version":329,"is_range":320,"range_type":50,"version_start":321,"version_start_type":322,"version_end":330,"version_end_type":324,"fixed_in":9},">= 8919a9b31eb4fb4c0a93e5fb350a626924302aa6, \u003C be5d1b61a2ad28c7e57fe8bfa277373e8ecffcdc","be5d1b61a2ad28c7e57fe8bfa277373e8ecffcdc",{"version":332,"is_range":38,"range_type":50,"version_start":332,"version_start_type":322,"version_end":332,"version_end_type":322,"fixed_in":9},"5.10",{"ecosystem":9,"name":334,"vendor":315,"product":335,"cpe_part":336,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":337},"linux kernel","linux_kernel","o",[338,342,346],{"version":339,"is_range":320,"range_type":340,"version_start":332,"version_start_type":322,"version_end":341,"version_end_type":324,"fixed_in":9},"gte5.10_lt5.10.53","cpe","5.10.53",{"version":343,"is_range":320,"range_type":340,"version_start":344,"version_start_type":322,"version_end":345,"version_end_type":324,"fixed_in":9},"gte5.11_lt5.13.5","5.11","5.13.5",{"version":347,"is_range":38,"range_type":340,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.14:rc1"]