PT-2024-11387 · Linux+2 · Linux Kernel+2

Published

2021-09-16

·

Updated

2025-09-23

·

CVE-2021-47391

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue arises from the RDMA/cma component in the Linux kernel, where the Finite State Machine (FSM) can enter a cycle, allowing rdma resolve ip() to be called twice on the same id priv. This violates the invariant that the same address resolution background request cannot be active twice. The problem occurs because rdma addr cancel() only cancels the first request on the list, while the second request remains active and can lead to a use-after-free error on id priv. The fix involves remembering if id priv has called rdma resolve ip() and always canceling before calling it again, ensuring the request list never has more than one item.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Race Condition

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2025-14376
CVE-2021-47391
OESA-2024-1860
OESA-2024-1862
OPENSUSE-SU-2024_2185-1
OPENSUSE-SU-2024_2189-1
SUSE-SU-2024:1978-1
SUSE-SU-2024:1979-1
SUSE-SU-2024:1983-1
SUSE-SU-2024:2008-1
SUSE-SU-2024:2010-1
SUSE-SU-2024:2011-1
SUSE-SU-2024:2019-1
SUSE-SU-2024:2183-1
SUSE-SU-2024:2184-1
SUSE-SU-2024:2185-1
SUSE-SU-2024:2189-1
SUSE-SU-2024:2190-1

Affected Products

Astra Linux
Linux Kernel
Suse