CVE - CVE-2021-47248

CVE-ID
CVE-2021-47248	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: udp: fix race between close() and udp_abort() Kaustubh reported and diagnosed a panic in udp_lib_lookup(). The root cause is udp_abort() racing with close(). Both racing functions acquire the socket lock, but udp{v6}_destroy_sock() release it before performing destructive actions. We can't easily extend the socket lock scope to avoid the race, instead use the SOCK_DEAD flag to prevent udp_abort from doing any action when the critical race happens. Diagnosed-and-tested-by: Kaustubh Pandey <kapandey@codeaurora.org>
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/2f73448041bd0682d4b552cfd314ace66107f1ad URL:https://git.kernel.org/stable/c/2f73448041bd0682d4b552cfd314ace66107f1ad MISC:https://git.kernel.org/stable/c/5a88477c1c85e4baa51e91f2d40f2166235daa56 URL:https://git.kernel.org/stable/c/5a88477c1c85e4baa51e91f2d40f2166235daa56 MISC:https://git.kernel.org/stable/c/65310b0aff86980a011c7c7bfa487a333d4ca241 URL:https://git.kernel.org/stable/c/65310b0aff86980a011c7c7bfa487a333d4ca241 MISC:https://git.kernel.org/stable/c/8729ec8a2238152a4afc212a331a6cd2c61aeeac URL:https://git.kernel.org/stable/c/8729ec8a2238152a4afc212a331a6cd2c61aeeac MISC:https://git.kernel.org/stable/c/a0882f68f54f7a8b6308261acee9bd4faab5a69e URL:https://git.kernel.org/stable/c/a0882f68f54f7a8b6308261acee9bd4faab5a69e MISC:https://git.kernel.org/stable/c/a8b897c7bcd47f4147d066e22cc01d1026d7640e URL:https://git.kernel.org/stable/c/a8b897c7bcd47f4147d066e22cc01d1026d7640e MISC:https://git.kernel.org/stable/c/e3c36c773aed0fef8b1d3d555b43393ec564400f URL:https://git.kernel.org/stable/c/e3c36c773aed0fef8b1d3d555b43393ec564400f
Assigning CNA
kernel.org
Date Record Created
20240410	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240410)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)