Vulnerability in Linux
CVE-2021-47215
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: kTLS, Fix crash in RX resync flow For the TLS RX resync flow, we maintain a list of TLS contexts that require some attention, to communicate their resync information to the HW. Here we fix list corruptions, by protecting the entries against movements coming from resync_handle_seq_match(), until their resync handling in napi is fully completed.
EPSS: 0.002 (9.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Linux — versions e9ce991bce5bacf71641bd0f72f4b7c589529f40, 5.13, 0
- Linux Linux_kernel — versions 5.16
References
Frequently asked questions
- What is CVE-2021-47215?
- CVE-2021-47215 is a critical-severity vulnerability in Linux. CVSS score: 9.8/10. Published 2024-04-10.
- How severe is CVE-2021-47215?
- Critical severity. CVSS v3 base score is 9.8 out of 10.