by Kastro
Paper/Archive/CVE-2021-47215

CVE-2021-47215

Linux Linux — net/mlx5e: kTLS, Fix crash in RX resync flow

EPSS 0.5%CVSS 9.8
critical.is priorityof 100
38
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 42.6.426 × 208.5No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: kTLS, Fix crash in RX resync flow For the TLS RX resync flow, we maintain a list of TLS contexts that require some attention, to communicate their resync information to the HW. Here we fix list corruptions, by protecting the entries against movements coming from resync_handle_seq_match(), until their resync handling in napi is fully completed.

Affected

ProductAffectedFixed inSource
Linuxe9ce991bce5bacf71641bd0f72f4b7c589529f40 – < ebeda7a9528ae690e6bf12791a868f0cca8391f2ebeda7a9528ae690e6bf12791a868f0cca8391f2CNA
Linuxe9ce991bce5bacf71641bd0f72f4b7c589529f40 – < cc4a9cc03faa6d8db1a6954bb536f2c1e63bdff6cc4a9cc03faa6d8db1a6954bb536f2c1e63bdff6CNA
Linux5.135.15.5CNA

Scores by source

Linux (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

refgit.kernel.org/stable/c/ebeda7a9528ae690e6bf12791a868f0cca8391f2refgit.kernel.org/stable/c/cc4a9cc03faa6d8db1a6954bb536f2c1e63bdff6