Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Kaustubh Pandey

Researcher fromCode Aurora
#49567of 53,633
5Total CVSS
Vulnerabilities · 1
PT-2024-11255
5.0
2021-06-09
Linux · Linux Kernel · CVE-2021-47248
**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** The issue is caused by a race between `close()` and `udp abort()` functions, which both acquire the socket lock. However, `udp{v6} destroy sock()` releases the lock before performing destructive actions, leading to a potential panic in `udp lib lookup()`. To prevent this, the `SOCK DEAD` flag is used to stop `udp abort()` from taking any action when the critical race occurs. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.