SB20240608179 - Race condition in Linux kernel ipv4
Published: June 8, 2024 Updated: May 13, 2025
Security Bulletin ID
SB20240608179
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Code execution
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Race condition (CVE-ID: CVE-2021-47248)
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a race condition within the udpv6_destroy_sock() function in net/ipv6/udp.c, within the udp_destroy_sock() and udp_abort() functions in net/ipv4/udp.c. A local user can escalate privileges on the system.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/e3c36c773aed0fef8b1d3d555b43393ec564400f
- https://git.kernel.org/stable/c/a0882f68f54f7a8b6308261acee9bd4faab5a69e
- https://git.kernel.org/stable/c/2f73448041bd0682d4b552cfd314ace66107f1ad
- https://git.kernel.org/stable/c/5a88477c1c85e4baa51e91f2d40f2166235daa56
- https://git.kernel.org/stable/c/8729ec8a2238152a4afc212a331a6cd2c61aeeac
- https://git.kernel.org/stable/c/65310b0aff86980a011c7c7bfa487a333d4ca241
- https://git.kernel.org/stable/c/a8b897c7bcd47f4147d066e22cc01d1026d7640e
- https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.238
- https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.196
- https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.274
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.46
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.13
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.128