Log in Start free

Vulnerability · Published May 21, 2024 · Assigned by Linux

CVE-2021-47248udp: fix race between close() and udp_abort()

High 7.8

In plain English

A high-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 9% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.2%top 91.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: udp: fix race between close() and udp_abort() Kaustubh reported and diagnosed a panic in udp_lib_lookup(). The root cause is udp_abort() racing with close(). Both racing functions acquire the socket lock, but udp{v6}_destroy_sock() release it before performing destructive actions. We can't easily extend the socket lock scope to avoid the race, instead use the SOCK_DEAD flag to prevent udp_abort from doing any action when the critical race happens. Diagnosed-and-tested-by: Kaustubh Pandey <kapandey@codeaurora.org>

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux5.10.46-1DEBIAN-CVE-2021-47248
Debian:13linux5.10.46-1DEBIAN-CVE-2021-47248
Debian:14linux5.10.46-1DEBIAN-CVE-2021-47248
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2021-47248
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2021-47248
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2021-47248
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2021-47248
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2021-47248
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2021-47248
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2021-47248
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2021-47248
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2021-47248
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2021-47248
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2021-47248
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2021-47248
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2021-47248
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2021-47248
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2021-47248
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2021-47248
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2021-47248
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2021-47248
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2021-47248
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2021-47248
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2021-47248
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2021-47248
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2021-47248
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2021-47248

Affected products (as reported)

VendorProductVersions
Linux Linux 5d77dca82839ef016a93ad7acd7058b14d967752 – before e3c36c773aed0fef8b1d3d555b43393ec564400f5d77dca82839ef016a93ad7acd7058b14d967752 – before a0882f68f54f7a8b6308261acee9bd4faab5a69e5d77dca82839ef016a93ad7acd7058b14d967752 – before 2f73448041bd0682d4b552cfd314ace66107f1ad5d77dca82839ef016a93ad7acd7058b14d967752 – before 5a88477c1c85e4baa51e91f2d40f2166235daa565d77dca82839ef016a93ad7acd7058b14d967752 – before 8729ec8a2238152a4afc212a331a6cd2c61aeeac5d77dca82839ef016a93ad7acd7058b14d967752 – before 65310b0aff86980a011c7c7bfa487a333d4ca2415d77dca82839ef016a93ad7acd7058b14d967752 – before a8b897c7bcd47f4147d066e22cc01d1026d7640e
Linux Linux 4.9

References