PT-2024-11182 · Linux · Linux Kernel

Matthieu Baerts · Published 2021-05-27 · Updated 2024-03-17 · CVE-2021-47132

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to MPTCP sk forward memory handling, which is protected by the msk socket spin lock. A code path updating this field without handling the relevant lock can cause corruption. The problem occurs in the mptcp retrans() function, which calls mptcp clean una wakeup(), and several helpers in this function update sk forward alloc, possibly causing corruption. The issue was reported by Matthieu and has been addressed by providing and using a new variant of the blamed function, which explicitly acquires the msk spin lock.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

BDU:2025-13606

CVE-2021-47132

Affected Products

Linux Kernel

References · 14

• https://osv.dev/vulnerability/CVE-2021-47132 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-13606 · Security Note
• https://git.kernel.org/stable/c/b9c78b1a95966a7bd2ddae05b73eafc0cda4fba3 · Patch
• https://cve.org/CVERecord?id=CVE-2021-47132 · Security Note
• https://ubuntu.com/security/CVE-2021-47132 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-47132 · Security Note
• https://git.kernel.org/stable/c/b5941f066b4ca331db225a976dae1d6ca8cf0ae3 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-47132 · Vendor Advisory
• https://git.kernel.org/linus/b5941f066b4ca331db225a976dae1d6ca8cf0ae3 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2021-47132 · Note
• https://lore.kernel.org/linux-cve-announce/2024031514-CVE-2021-47132-80b2@gregkh · Note
• https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.10 · Note
• https://twitter.com/CVEnew/status/1768738324485746929 · Twitter Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-47132 · Note