Skip to content
fr Sign in
6.7 Medium

CVE-2021-23133 A race condition in Linux kernel SCTP sockets (net/sctp/socket.c) before 5.12-rc8 can lead to kernel privilege…

Description

A race condition in Linux kernel SCTP sockets (net/sctp/socket.c) before 5.12-rc8 can lead to kernel privilege escalation from the context of a network service or an unprivileged process. If sctp_destroy_sock is called without sock_net(sk)->sctp.addr_wq_lock then an element is removed from the auto_asconf_splist list without any proper locking. This can be exploited by an attacker with network service privileges to escalate to root or from the context of an unprivileged user directly if a BPF_CGROUP_INET_SOCK_CREATE is attached which denies creation of some SCTP socket.

Affected products and versions

Product Affected versions Fixed in
Linux Kernel 5.12 earliest → < 5.12-rc8 5.12-rc8

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Linux Kernel

The 11 CVEs of Linux Kernel →
CVE-2022-2503 Dm-verity is used for extending root-of-trust to root filesystems 6.9 Medium CVE-2022-2327 io_uring use work_flags to determine which identity need to grab from the calling process to make sure it is… 7.5 High CVE-2021-22543 An issue was discovered in Linux: KVM through Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks… 8.7 High CVE-2021-23134 Use After Free vulnerability in nfc sockets in the Linux Kernel before 5.12.4 allows local attackers to elevate their… 7.8 High
Track this CVE