Riskcovery

CVE-2021-47215

net/mlx5e: kTLS, Fix crash in RX resync flow

State
Published
Severity
9.8 Critical
Published
Apr 10, 2024
Updated
Aug 5, 2026
Reserved
Apr 10, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net/mlx5e: kTLS, Fix crash in RX resync flow

For the TLS RX resync flow, we maintain a list of TLS contexts that require some attention, to communicate their resync information to the HW. Here we fix list corruptions, by protecting the entries against movements coming from resync_handle_seq_match(), until their resync handling in napi is fully completed.

Scores

CVSSScoreVectorSource
3.19.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • e9ce991bce5bacf71641bd0f72f4b7c589529f40 to before ebeda7a9528ae690e6bf12791a868f0cca8391f2Affected
  • e9ce991bce5bacf71641bd0f72f4b7c589529f40 to before cc4a9cc03faa6d8db1a6954bb536f2c1e63bdff6Affected
LinuxLinux
  • 5.13Affected
  • before 5.13Not affected
  • 5.15.5 through 5.15.*Not affected
  • 5.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.