SECUFOCUSNOW
Home›CVE index›CVE-2021-47129
Review reviewHigh

CVE-2021-47129

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_ct: skip expectations for confirmed conntrack nft_ct_expect_obj_eval() calls nf_ct_ext_add() for a confirmed conntrack entry. However, nf_ct_ext_add() can only be called for !nf_ct_is_confirmed(). [ 1825.349056] WARNING: CPU: 0 PID: 1279 at net/netfilter/nf_conntrack_extend.c:48 nf_ct_xt_add+0x18e/0x1a0 [nf_conntrack] [ 1825.351391] RIP: 0010:nf_ct_ext_add+0x18e/0x1a0 [nf_conntrack] [ 1825.351493] Code: 41 5c 41 5d 41 5e 41 5f c3 41 bc 0a 00 00 00 e9 15 ff ff ff ba 09 00 00 00 31 f6 4c 89 ff e8 69 6c 3d e9 eb...

CVSS
7.8
EPSS
0.44%
36.3% percentile
CISA KEV
Not listed
Published
2024.03.16
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability0.44%
Technical severityCVSS 7.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_ct: skip expectations for confirmed conntrack nft_ct_expect_obj_eval() calls nf_ct_ext_add() for a confirmed conntrack entry. However, nf_ct_ext_add() can only be called for !nf_ct_is_confirmed(). [ 1825.349056] WARNING: CPU: 0 PID: 1279 at net/netfilter/nf_conntrack_extend.c:48 nf_ct_xt_add+0x18e/0x1a0 [nf_conntrack] [ 1825.351391] RIP: 0010:nf_ct_ext_add+0x18e/0x1a0 [nf_conntrack] [ 1825.351493] Code: 41 5c 41 5d 41 5e 41 5f c3 41 bc 0a 00 00 00 e9 15 ff ff ff ba 09 00 00 00 31 f6 4c 89 ff e8 69 6c 3d e9 eb...

Affected product and versions

Product
Linux Linux, linux kernel
Affected versions
>= 857b46027d6f91150797295752581b7155b9d0e1 < da8d31e80ff425f5a65dab7060d5c4aba749e562, >= 857b46027d6f91150797295752581b7155b9d0e1 < 5f3429c05e4028a0e241afdad856dd15dec2ffb9, >= 857b46027d6f91150797295752581b7155b9d0e1 < 2c0e6b35b88a961127066a1028bce9c727cbc3e5, >= 857b46027d6f91150797295752581b7155b9d0e1 < 1710eb913bdcda3917f44d383c32de6bdabfc836, >= 5.3, >= 5.3 < 5.4.125, >= 5.5 < 5.10.43, >= 5.11 < 5.12.10, 5.13
Fixed versions
5.4.125, 5.10.43, 5.12.10

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux Linux, linux kernel and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
CWE-273
CVE-2021-47129 — Linux Linux, linux kernel | SECUFOCUS NOW