NetSight
IP …
medium6.7

CVE-2021-23133

A race condition in Linux kernel SCTP sockets (net/sctp/socket.c) before 5.12-rc8 can lead to kernel privilege escalation from the context of a network service…

Impact

A race condition in Linux kernel SCTP sockets (net/sctp/socket.c) before 5.12-rc8 can lead to kernel privilege escalation from the context of a network service or an unprivileged process. If sctp_destroy_sock is called without sock_net(sk)->sctp.addr_wq_lock then an element is removed from the auto_asconf_splist list without any proper locking. This can be exploited by an attacker with network service privileges to escalate to root or from the context of an unprivileged user directly if a BPF_CGROUP_INET_SOCK_CREATE is attached which denies creation of some SCTP socket.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 4.4.269
from 4.5 before 4.9.269
from 4.10 before 4.14.233
from 4.15 before 4.19.191
from 4.20 before 5.4.119
from 5.5 before 5.10.37
FedoraprojectFedora
Versions 32, 33, 34
DebianDebian Linux
Version 9.0
NetappCloud Backup
All versions
NetappSolidfire \& Hci Management Node
All versions
BroadcomBrocade Fabric Operating System
All versions
NetappH410c Firmware
All versions
NetappH300s Firmware
All versions
NetappH500s Firmware
All versions
NetappH700s Firmware
All versions
NetappH300e Firmware
All versions
NetappH500e Firmware
All versions

Weakness classification

CWE-362

References