CVE-2021-231336.7MediumCWE-362

CVE-2021-23133: Linux Kernel sctp_destroy_sock race condition

Linux Kernel

Fixed in 5.12-rc8 · Affected: Linux Kernel before 5.12-rc8 · Exploitation: unlikely (under 1%)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

0.5%probability of exploitation in the next 30 days

41st percentile

050100

Higher than 41% of scored CVEs

6.7MediumCVSS 3.1

LowMediumHighCrit.

DescriptionCVE.org

A race condition in Linux kernel SCTP sockets (net/sctp/socket.c) before 5.12-rc8 can lead to kernel privilege escalation from the context of a network service or an unprivileged process. If sctp_destroy_sock is called without sock_net(sk)->sctp.addr_wq_lock then an element is removed from the auto_asconf_splist list without any proper locking. This can be exploited by an attacker with network service privileges to escalate to root or from the context of an unprivileged user directly if a BPF_CGROUP_INET_SOCK_CREATE is attached which denies creation of some SCTP socket.

Affected products1

From the CVE record. A product or version that is not listed is unknown, not unaffected.

Linux Kernel · Linux Kernelbefore 5.12-rc8

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Unlikely (under 1%). EPSS under 1%, or no score yet.
CISA KEV: Not listed
Public check: No public nuclei template
Weakness: Race Condition · Race Conditions
Vendor: Linux Kernel
Published: April 2021
Band: Unlikely (under 1%), April 2021

CoverageNo articles yet

No CyberSIXT article names CVE-2021-23133 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.