PT-2024-11105 · Linux+3 · Linux Kernel+3

Published 2021-04-26 · Updated 2025-04-11 · CVE-2021-47001

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the xprtrdma component in the Linux kernel. After a reconnect, the reply handler opens the cwnd, enabling more RPC Calls to be sent before rpcrdma post recvs() can post enough Receive WRs to receive their replies. This causes an RNR and the new connection is lost immediately. The race is most clearly exposed when KASAN and disconnect injection are enabled, slowing down rpcrdma rep create() enough to allow the send side to post a bunch of RPC Calls before the Receive completion handler can invoke ib post recv().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2025-07276

CVE-2021-47001

OPENSUSE-SU-2024_1489-1

SUSE-SU-2024:1465-1

SUSE-SU-2024:1489-1

USN-7173-1

USN-7173-2

USN-7173-3

USN-7195-1

USN-7195-2

USN-7413-1

Affected Products

Linuxmint

Linux Kernel

Suse

Ubuntu

References · 703

• 🔥 https://github.com/Kakashiiiiy/CVE-2021-29155 · Exploit
• 🔥 https://github.com/benschlueter/CVE-2021-29155 · Exploit
• https://ubuntu.com/security/CVE-2024-50059 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56593 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56602 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56594 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-53057 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56659 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-49868 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-53183 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50151 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50205 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21689 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-49967 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7173-1 · Vendor Advisory