PT-2024-11181 · Linux+4 · Linux Kernel+4
Maxim Mikityanskiy
·
Published
2021-06-01
·
Updated
2025-02-27
·
CVE-2021-47131
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A use-after-free vulnerability has been resolved in the Linux kernel. The issue occurs when a netdev with active TLS offload goes down, and the TLS context is deallocated, but the socket still points to it. If the netdev goes up while the connection is still active, it can lead to a use-after-free of the TLS context. The commit addresses this bug by keeping the context alive until its normal destruction and implementing necessary fallbacks to resume the connection in software (non-offloaded) kTLS mode. On the TX side,
tls sw fallback is used to encrypt all packets. The RX side already has the necessary fallbacks, and the new flag TLS RX DEV DEGRADED is added to indicate the fallback mode.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Suse
Ubuntu