PT-2024-11231 · Linux+2 · Linux Kernel+2

Nikolay Aleksandrov · Published 2021-06-10 · Updated 2025-02-17 · CVE-2021-47222

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.13.0-rc3+ #360

Description The vulnerability is related to the egress tunnel code in the Linux kernel's bridge module. The code uses dst clone() and directly sets the result, which can cause problems if the entry has a reference count of 0 or has already been deleted. This triggers a WARN ON() in dst hold() when a reference count cannot be taken. The issue is fixed by using dst hold safe() and checking if a reference was actually taken before setting the destination.

Recommendations To resolve the issue, update the Linux kernel to a version that includes the fix for the vulnerability. Specifically, for Linux kernel version 5.13.0-rc3+ #360, update to a newer version that includes the patch for the net: bridge: fix vlan tunnel dst refcnt when egressing vulnerability.

As a temporary workaround, consider disabling the vulnerable function or restricting access to the affected module to minimize the risk of exploitation. However, this should not be considered a permanent solution, and updating the kernel to a patched version is recommended as soon as possible.

At the moment, there is no information about a newer version that contains a fix for this vulnerability, other than updating to a version after 5.13.0-rc3+ #360.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2025-13716

CVE-2021-47222

SUSE-SU-2025:0565-1

SUSE-SU-2025_0565-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 135

• https://osv.dev/vulnerability/UBUNTU-CVE-2021-47222 · Vendor Advisory
• https://git.kernel.org/stable/c/25053a8404ba17ca48f5553d487afc1882e9f56c · Patch
• https://git.kernel.org/stable/c/fc7fdd8c5c2ad2fe3e297698be9d4dbe4a4e0579 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:0565-1 · Vendor Advisory
• https://git.kernel.org/stable/c/79855be6445b6592bddb7bd7167083ec8cdbd73f · Patch
• https://ubuntu.com/security/CVE-2021-47222 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-47222 · Security Note
• https://git.kernel.org/stable/c/84fc1c944e45ab317e2e70a0e7f76fa2a5e43b6e · Patch
• https://security-tracker.debian.org/tracker/CVE-2021-47222 · Vendor Advisory
• https://git.kernel.org/stable/c/42020f7f37a90d24b9551f5f7eba3f7c7c102968 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-47222 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-47222 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-47222 · Vendor Advisory
• https://git.kernel.org/stable/c/cfc579f9d89af4ada58c69b03bcaa4887840f3b3 · Patch
• https://bdu.fstec.ru/vul/2025-13716 · Security Note