PT-2024-8907 · Linux+4 · Linux Kernel+4

Andrea Mayer · Published 2023-11-07 · Updated 2024-11-26 · CVE-2021-47515

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.16-rc4

Description: The issue is related to a NULL pointer dereference in the seg6 component of the Linux kernel. When an IPv4 packet is received and meant to be encapsulated in an outer IPv6+SRH header, the seg6 do srh encap function clears the IPv6 socket control block, leading to a loss of receiving interface index information. This condition can trigger a NULL pointer dereference if a specific commit is applied. The vulnerability can be exploited to cause a denial of service.

Recommendations: To resolve the issue, update the Linux kernel to a version that includes the fix for the seg6 component, specifically the change that sets the IP6CB(skb)->iif with the index of the receiving interface once again. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2024-10574

CVE-2021-47515

OESA-2024-1835

OPENSUSE-SU-2024_2372-1

OPENSUSE-SU-2024_2394-1

RHSA-2023:6583

RHSA-2023_6583

SUSE-SU-2024:2372-1

SUSE-SU-2024:2394-1

SUSE-SU-2024:2939-1

Affected Products

Astra Linux

Linux Kernel

Red Hat

Red Os

Suse

References · 1219

• https://bdu.fstec.ru/vul/2024-10574 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2021-47515 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-47515 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-48772 · Security Note
• https://git.kernel.org/stable/c/666521b3852d2b2f52d570f9122b1e4b50d96831 · Patch
• https://git.kernel.org/stable/c/6431e71093f3da586a00c6d931481ffb0dc2db0e · Patch
• https://git.kernel.org/stable/c/b16d412e5f79734033df04e97d7ea2f50a8e9fe3 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-48744 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-38637 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-47515 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-48717 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-47583 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-38546 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-47270 · Security Note
• https://osv.dev/vulnerability/OESA-2024-1835 · Vendor Advisory