PT-2024-8925 · Linux+3 · Linux Kernel+3

Published

2024-05-22

·

Updated

2025-03-19

·

CVE-2021-47496

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)
Description: The issue is caused by a flipped sign in tls err abort() calls, leading to memory corruption in other code. Specifically, sk->sk err expects a positive value, but ktls does not always follow this convention. This results in underflow of buf->len and sd->len, leading to huge buf->offset and bogus addresses computed in later calls to actor(). The error-prone sign flip is centralized in tls err abort() callers to pass a negative error code consistently, and a warning is thrown to catch future misuse.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2024-10595
CVE-2021-47496
OESA-2024-1736
OPENSUSE-SU-2024_2185-1
OPENSUSE-SU-2024_2189-1
OPENSUSE-SU-2025_0898-1
OPENSUSE-SU-2025_0943-1
SUSE-SU-2024:1979-1
SUSE-SU-2024:1983-1
SUSE-SU-2024:2008-1
SUSE-SU-2024:2010-1
SUSE-SU-2024:2011-1
SUSE-SU-2024:2019-1
SUSE-SU-2024:2183-1
SUSE-SU-2024:2184-1
SUSE-SU-2024:2185-1
SUSE-SU-2024:2189-1
SUSE-SU-2024:2190-1
SUSE-SU-2025:0892-1
SUSE-SU-2025:0898-1
SUSE-SU-2025:0908-1
SUSE-SU-2025:0943-1

Affected Products

Astra Linux
Linux Kernel
Red Os
Suse