CVE-2021-46936

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: net: fix use-after-free in tw_timer_handler A real world panic issue was found as follow in Linux 5.4. BUG: unable to handle page fault for address: ffffde49a863de28 PGD 7e6fe62067 P4D 7e6fe62067 PUD 7e6fe63067 PMD f51e064067 PTE 0 RIP: 0010:tw_timer_handler+0x20/0x40 Call Trace: <IRQ> call_timer_fn+0x2b/0x120 run_timer_softirq+0x1ef/0x450 __do_softirq+0x10d/0x2b8 irq_exit+0xc7/0xd0 smp_apic_timer_interrupt+0x68/0x120 apic_timer_interrupt+0xf/0x20 This issue was also reported since 2017 in the thread [1], unfortunately, the...

Affected product and versions

Product

Linux Linux, linux kernel

Affected versions

>= 61a7e26028b94805fd686a6dc9dbd9941f8f19b0 < 15579e1301f856ad9385d720c9267c11032a5022, >= 61a7e26028b94805fd686a6dc9dbd9941f8f19b0 < e73164e89d1be561228a4534e1091369ee4ba41a, >= 61a7e26028b94805fd686a6dc9dbd9941f8f19b0 < 5c2fe20ad37ff56070ae0acb34152333976929b4, >= 61a7e26028b94805fd686a6dc9dbd9941f8f19b0 < a8e1944b44f94f5c5f530e434c5eaee787254566, >= 61a7e26028b94805fd686a6dc9dbd9941f8f19b0 < fe5838c22b986c1190f1dce9aa09bf6a491c1a69, >= 61a7e26028b94805fd686a6dc9dbd9941f8f19b0 < 2386e81a1d277f540e1285565c9d41d531bb69d4, >= 61a7e26028b94805fd686a6dc9dbd9941f8f19b0 < 08eacbd141e2495d2fcdde84358a06c4f95cbb13, >= 61a7e26028b94805fd686a6dc9dbd9941f8f19b0 < e22e45fc9e41bf9fcc1e92cfb78eb92786728ef0, >= 2.6.27, >= 2.6.27 < 4.4.298, >= 4.5.0 < 4.9.296, >= 4.10.0 < 4.14.261, >= 4.15.0 < 4.19.224, >= 4.20.0 < 5.4.170, >= 5.5.0 < 5.10.90, >= 5.11.0 < 5.15.13

Fixed versions

4.4.298, 4.9.296, 4.14.261, 4.19.224, 5.4.170, 5.10.90, 5.15.13

Technical data

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-416