CVE-2021-47291

ipv6: fix another slab-out-of-bounds in fib6_nh_flush_exceptions

State: Published
Severity: 7.8 High
Published: May 21, 2024
Updated: Aug 5, 2026
Reserved: May 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

ipv6: fix another slab-out-of-bounds in fib6_nh_flush_exceptions

While running the self-tests on a KASAN enabled kernel, I observed a slab-out-of-bounds splat very similar to the one reported in commit 821bbf79fe46 ("ipv6: Fix KASAN: slab-out-of-bounds Read in fib6_nh_flush_exceptions").

We additionally need to take care of fib6_metrics initialization failure when the caller provides an nh.

The fix is similar, explicitly free the route instead of calling fib6_info_release on a half-initialized object.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	f88d8ea67fbdbac7a64bfa6ed9a2ba27bb822f74 to before 830251361425c5be044db4d826aaf304ea3d14c6Affected f88d8ea67fbdbac7a64bfa6ed9a2ba27bb822f74 to before ce8fafb68051fba52546f8bbe8621f7641683680Affected f88d8ea67fbdbac7a64bfa6ed9a2ba27bb822f74 to before 115784bcccf135c3a3548098153413d76f16aae0Affected f88d8ea67fbdbac7a64bfa6ed9a2ba27bb822f74 to before 8fb4792f091e608a0a1d353dfdf07ef55a719db5Affected
LinuxLinux	5.3Affected before 5.3Not affected 5.4.136 through 5.4.Not affected 5.10.54 through 5.10.Not affected 5.13.6 through 5.13.*Not affected 5.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.