SECUFOCUSNOW
Home›CVE index›CVE-2021-47496
Review reviewHigh

CVE-2021-47496

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: net/tls: Fix flipped sign in tls_err_abort() calls sk->sk_err appears to expect a positive value, a convention that ktls doesn't always follow and that leads to memory corruption in other code. For instance, [kworker] tls_encrypt_done(..., err=<negative error from crypto request>) tls_err_abort(.., err) sk->sk_err = err; [task] splice_from_pipe_feed ... tls_sw_do_sendpage if (sk->sk_err) { ret = -sk->sk_err; // ret is positive splice_from_pipe_feed (continued) ret = actor(...) // ret is still positive and interpreted as byt...

CVSS
7.8
EPSS
-
- percentile
CISA KEV
Not listed
Published
2024.05.22
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability-
Technical severityCVSS 7.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: net/tls: Fix flipped sign in tls_err_abort() calls sk->sk_err appears to expect a positive value, a convention that ktls doesn't always follow and that leads to memory corruption in other code. For instance, [kworker] tls_encrypt_done(..., err=<negative error from crypto request>) tls_err_abort(.., err) sk->sk_err = err; [task] splice_from_pipe_feed ... tls_sw_do_sendpage if (sk->sk_err) { ret = -sk->sk_err; // ret is positive splice_from_pipe_feed (continued) ret = actor(...) // ret is still positive and interpreted as byt...

Affected product and versions

Product
Linux Linux, linux kernel
Affected versions
>= c46234ebb4d1eee5e09819f49169e51cfc6eb909 < e0cfd5159f314d6b304d030363650b06a2299cbb, >= c46234ebb4d1eee5e09819f49169e51cfc6eb909 < f3dec7e7ace38224f82cf83f0049159d067c2e19, >= c46234ebb4d1eee5e09819f49169e51cfc6eb909 < e41473543f75f7dbc5d605007e6f883f1bd13b9a, >= c46234ebb4d1eee5e09819f49169e51cfc6eb909 < da353fac65fede6b8b4cfe207f0d9408e3121105, >= 4.17, >= 4.17 < 5.4.157, >= 5.5 < 5.10.77, >= 5.11 < 5.14.16, 5.15
Fixed versions
5.4.157, 5.10.77, 5.14.16

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux Linux, linux kernel and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
CWE-787