CVE-2021-47215

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-47215
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: kTLS, Fix crash in RX resync flow For the TLS RX resync flow, we maintain a list of TLS contexts that require some attention, to communicate their resync information to the HW. Here we fix list corruptions, by protecting the entries against movements coming from resync_handle_seq_match(), until their resync handling in napi is fully completed.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/cc4a9cc03faa6d8db1a6954bb536f2c1e63bdff6 Patch
https://git.kernel.org/stable/c/ebeda7a9528ae690e6bf12791a868f0cca8391f2 Patch
https://git.kernel.org/stable/c/cc4a9cc03faa6d8db1a6954bb536f2c1e63bdff6 Patch
https://git.kernel.org/stable/c/ebeda7a9528ae690e6bf12791a868f0cca8391f2 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.16:rc1:*:*:*:*:*:*
History

27 Mar 2025, 21:05

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.16:rc1:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/cc4a9cc03faa6d8db1a6954bb536f2c1e63bdff6 - () https://git.kernel.org/stable/c/cc4a9cc03faa6d8db1a6954bb536f2c1e63bdff6 - Patch
References () https://git.kernel.org/stable/c/ebeda7a9528ae690e6bf12791a868f0cca8391f2 - () https://git.kernel.org/stable/c/ebeda7a9528ae690e6bf12791a868f0cca8391f2 - Patch
First Time Linux
Linux linux Kernel
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE NVD-CWE-noinfo

21 Nov 2024, 06:35

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/cc4a9cc03faa6d8db1a6954bb536f2c1e63bdff6 - () https://git.kernel.org/stable/c/cc4a9cc03faa6d8db1a6954bb536f2c1e63bdff6 -
References () https://git.kernel.org/stable/c/ebeda7a9528ae690e6bf12791a868f0cca8391f2 - () https://git.kernel.org/stable/c/ebeda7a9528ae690e6bf12791a868f0cca8391f2 -
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net/mlx5e: kTLS, se corrige un fallo en el flujo de resincronización RX Para el flujo de resincronización RX de TLS, mantenemos una lista de contextos TLS que requieren cierta atención para comunicar su información de resincronización al hardware. Aquí corregimos las corrupciones de la lista al proteger las entradas contra los movimientos provenientes de resync_handle_seq_match(), hasta que se complete por completo su manejo de resincronización en napi.

10 Apr 2024, 19:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-04-10 19:15

Updated : 2025-03-27 21:05

NVD link : CVE-2021-47215

Mitre link : CVE-2021-47215

CVE.ORG link : CVE-2021-47215

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo