PT-2024-11126 · Linux+1 · Linux Kernel+1
Published
2021-04-12
·
Updated
2025-01-09
·
CVE-2021-47026
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A use-after-free problem can occur in the Linux kernel when a session is removed dynamically by the sysfs interface "remove path" that calls the
rtrs clt remove path from sysfs function. This function first removes the sysfs interfaces and frees the sess->stats object, and then removes the session from the active list. As a result, some functions may access a non-connected session and the freed sess->stats object, even if they check the session status before accessing the session. For example, rtrs clt request and get next path min inflight check the session status and try to send IO to the session, but the session status could be changed while they are trying to send IO, generating a use-after-free problem. The patch changes the rtrs clt remove path from sysfs to remove the session from the active session list and then destroy the sysfs interfaces.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linux Kernel
Suse