CVE - CVE-2021-47291

CVE-ID
CVE-2021-47291	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: ipv6: fix another slab-out-of-bounds in fib6_nh_flush_exceptions While running the self-tests on a KASAN enabled kernel, I observed a slab-out-of-bounds splat very similar to the one reported in commit 821bbf79fe46 ("ipv6: Fix KASAN: slab-out-of-bounds Read in fib6_nh_flush_exceptions"). We additionally need to take care of fib6_metrics initialization failure when the caller provides an nh. The fix is similar, explicitly free the route instead of calling fib6_info_release on a half-initialized object.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/115784bcccf135c3a3548098153413d76f16aae0 URL:https://git.kernel.org/stable/c/115784bcccf135c3a3548098153413d76f16aae0 MISC:https://git.kernel.org/stable/c/830251361425c5be044db4d826aaf304ea3d14c6 URL:https://git.kernel.org/stable/c/830251361425c5be044db4d826aaf304ea3d14c6 MISC:https://git.kernel.org/stable/c/8fb4792f091e608a0a1d353dfdf07ef55a719db5 URL:https://git.kernel.org/stable/c/8fb4792f091e608a0a1d353dfdf07ef55a719db5 MISC:https://git.kernel.org/stable/c/ce8fafb68051fba52546f8bbe8621f7641683680 URL:https://git.kernel.org/stable/c/ce8fafb68051fba52546f8bbe8621f7641683680
Assigning CNA
kernel.org
Date Record Created
20240521	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240521)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)