PT-2024-11251 · Linux+1 · Linux Kernel+1

Maxim Mikityanskiy · Published 2021-06-10 · Updated 2024-11-05 · CVE-2021-47244

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The TCP option parser in mptcp (mptcp get options) could read one byte out of bounds. When the length is 1, the execution flow gets into the loop, reads one byte of the opcode, and if the opcode is neither TCPOPT EOL nor TCPOPT NOP, it reads one more byte, which exceeds the length of 1. This issue is related to the parsing of TCP options.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2025-07350

CVE-2021-47244

Affected Products

Astra Linux

Linux Kernel

References · 18

• https://git.kernel.org/stable/c/73eeba71dc9932970befa009e68272a3d5ec4a58 · Patch
• https://osv.dev/vulnerability/CVE-2021-47244 · Vendor Advisory
• https://git.kernel.org/stable/c/07718be265680dcf496347d475ce1a5442f55ad7 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-47244 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-47244 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-47244 · Security Note
• https://bdu.fstec.ru/vul/2025-07350 · Security Note
• https://cve.org/CVERecord?id=CVE-2021-47244 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2021-47244 · Vendor Advisory
• https://git.kernel.org/stable/c/76e02b8905d0691e89e104a882f3bba7dd0f6037 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-47244 · Vendor Advisory
• https://git.linuxtesting.ru/pub/scm/linux/kernel/git/lvc/linux-stable.git/commit/?h=v5.10.176-lvc1&id=73eeba71dc9932970befa009e68272a3d5ec4a58 · Note
• https://lore.kernel.org/linux-cve-announce/2024052142-CVE-2021-47244-cc41@gregkh · Note
• https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.46 · Note
• https://git.kernel.org/linus/07718be265680dcf496347d475ce1a5442f55ad7 · Note