PT-2024-8985 · Linux+3 · Linux Kernel+3
Marta Plantykow
·
Published
2024-05-24
·
Updated
2024-11-27
·
CVE-2021-47563
CVSS v2.0
6.8
Medium
| Vector | AV:L/AC:L/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 5.15.0-rc5+
Description:
The issue is related to the ice driver in the Linux kernel, which manages XDP resources shared between ndo bpf op and VSI rebuild flow. When the VSI is being rebuilt, there is a problem with bpf prog refcounting. The ice prepare xdp rings() function is called with vsi->xdp prog as an argument, which is later used by ice vsi assign bpf prog(). This causes the same bpf prog pointers to be swapped, leading to a decrement in refcount when bpf prog put is called. As a result, the bpf prog may be wiped out from the system while the kernel still tries to refer to it.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Integer Underflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Red Os
Suse