PT-2021-4247 · Linux+9 · Linux Kernel+9
Or Cohen
·
Published
2021-04-13
·
Updated
2024-06-15
·
CVE-2021-23133
CVSS v3.1
7.0
High
| Vector | AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 5.12-rc8
Description
A race condition in the Linux kernel's SCTP sockets can lead to kernel privilege escalation. This issue arises when
sctp destroy sock is called without proper locking, allowing an element to be removed from the auto asconf splist list. An attacker with network service privileges can exploit this to escalate to root, or an unprivileged user can exploit it directly if a BPF CGROUP INET SOCK CREATE is attached, which denies the creation of some SCTP sockets.Recommendations
For Linux kernel versions prior to 5.12-rc8, update to version 5.12-rc8 or later to resolve the issue. As a temporary workaround, consider restricting the use of SCTP sockets or disabling the
sctp destroy sock function until a patch is available. Additionally, avoid using BPF CGROUP INET SOCK CREATE to deny the creation of SCTP sockets until the issue is resolved.Exploit
Fix
Race Condition
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Centos
Linuxmint
Linux Kernel
Red Hat
Red Os
Suse
Ubuntu