Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: mptcp: remove tcp ulp setsockopt support TCP_ULP setsockopt cannot be used for mptcp because its already used internally to plumb subflow (tcp) sockets to the mptcp layer. syzbot managed to trigger a crash for mptcp connections that are in fallback mode: KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] CPU: 1 PID: 1083 Comm: syz-executor.3 Not tainted 5.16.0-rc2-syzkaller #0 RIP: 0010:tls_build_proto net/tls/tls_main.c:776 [inline] [..] __tcp_set_ulp net/ipv4/tcp_ulp.c:139 [inline] tcp_set_ulp+0x428/0x4c0 net/ipv4/tcp_ulp.c:160 do_tcp_setsockopt+0x455/0x37c0 net/ipv4/tcp.c:3391 mptcp_setsockopt+0x1b47/0x2400 net/mptcp/sockopt.c:638 Remove support for TCP_ULP setsockopt.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 5.13, < 5.15.11 |
Related Weaknesses (CWE)
References
- https://git.kernel.org/stable/c/3de0c86d42f841d1d64f316cd949e65c566f0734Patch
- https://git.kernel.org/stable/c/404cd9a22150f24acf23a8df2ad0c094ba379f57Patch
- https://git.kernel.org/stable/c/3de0c86d42f841d1d64f316cd949e65c566f0734Patch
- https://git.kernel.org/stable/c/404cd9a22150f24acf23a8df2ad0c094ba379f57Patch
FAQ
What is CVE-2021-47591?
CVE-2021-47591 is a vulnerability with a CVSS score of 5.5 (MEDIUM). In the Linux kernel, the following vulnerability has been resolved: mptcp: remove tcp ulp setsockopt support TCP_ULP setsockopt cannot be used for mptcp because its already used internally to plumb ...
How severe is CVE-2021-47591?
CVE-2021-47591 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-47591?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel.