CVE-2021-47215: net/mlx5e: kTLS, Fix crash in RX resync flow
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: kTLS, Fix crash in RX resync flow
For the TLS RX resync flow, we maintain a list of TLS contexts that require some attention, to communicate their resync information to the HW. Here we fix list corruptions, by protecting the entries against movements coming from resynchandleseqmatch(), until their resync handling in napi is fully completed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-47215?
CVE-2021-47215 has been assessed to have a high severity due to potential crashes in the TLS RX resync flow.
How do I fix CVE-2021-47215?
To fix CVE-2021-47215, update the Linux kernel to version 5.15.6 or later.
Which versions of the Linux kernel are affected by CVE-2021-47215?
CVE-2021-47215 affects Linux kernel versions from 5.13 up to 5.15.5 and the 5.16-rc1.
What is the impact of CVE-2021-47215?
CVE-2021-47215 could lead to a system crash when using the TLS RX resync flow.
Is CVE-2021-47215 specific to any Linux distributions?
CVE-2021-47215 can affect any Linux distribution using the vulnerable kernel versions mentioned.