PT-2021-8077 · Linux+3 · Linux Kernel+3
Lee Jones
·
Published
2021-12-25
·
Updated
2024-08-13
·
CVE-2021-46929
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to a use-after-free vulnerability in the sctp sock dump function. This vulnerability occurs when the asoc is peeled off and the old sk is freed after getting it by asoc->base.sk and before calling lock sock(sk). To prevent the sk free, the patch uses call rcu() and moves sock put and ep free into sctp endpoint destroy rcu(), making it safe to hold the ep under rcu read lock in sctp transport traverse process().
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Red Os
Suse