cbcvebase.
CVE-2021-23133
published 2021-04-22

CVE-2021-23133: A race condition in Linux kernel SCTP sockets (net/sctp/socket.c) before 5.12-rc8 can lead to kernel privilege escalation from the context of a network service…

PriorityP336high7CVSS 3.1
AVLACHPRLUINSUCHIHAH
EPSS
0.48%
38.4th percentile
A race condition in Linux kernel SCTP sockets (net/sctp/socket.c) before 5.12-rc8 can lead to kernel privilege escalation from the context of a network service or an unprivileged process. If sctp_destroy_sock is called without sock_net(sk)->sctp.addr_wq_lock then an element is removed from the auto_asconf_splist list without any proper locking. This can be exploited by an attacker with network service privileges to escalate to root or from the context of an unprivileged user directly if a BPF_CGROUP_INET_SOCK_CREATE is attached which denies creation of some SCTP socket.

Affected

24 ranges
VendorProductVersion rangeFixed in
debiandebian_linux
debianlinux< linux 5.10.38-1 (bookworm)linux 5.10.38-1 (bookworm)
fedoraprojectfedora
fedoraprojectfedora
fedoraprojectfedora
linuxlinux_kernel>= 0 < 5.10.38-15.10.38-1
linuxlinux_kernel>= 0 < 5.10.38-15.10.38-1
linuxlinux_kernel>= 0 < 5.10.38-15.10.38-1
linuxlinux_kernel>= 0 < 5.10.38-15.10.38-1
linuxlinux_kernel>= 0 < 4.15.0-147.1514.15.0-147.151
linuxlinux_kernel>= 0 < 5.4.0-77.865.4.0-77.86
linuxlinux_kernel>= 4.10 < 4.14.2324.14.232
linuxlinux_kernel>= 4.15 < 4.19.1894.19.189
linuxlinux_kernel>= 4.20 < 5.4.1145.4.114
linuxlinux_kernel>= 5.11 < 5.11.165.11.16
linuxlinux_kernel>= 5.5 < 5.10.325.10.32
linux_kernellinux_kernel>= unspecified < 5.12-rc85.12-rc8
msrccbl2_kernel_5.10.78.1-1_on_cbl_mariner_2.0
msrccbl_mariner_1.0_arm
msrccbl_mariner_1.0_x64
msrccbl_mariner_2.0_arm
msrccbl_mariner_2.0_x64
msrccm1_kernel_5.10.60.1-1_on_cbl_mariner_1.0
paloaltopan-os

CVSS provenance

nvdv3.17.0HIGHCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.06.9MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C
osv7.0HIGH
vendor_msrc7.0HIGH
vendor_debian6.7MEDIUM
vendor_redhat6.7MEDIUM
vendor_ubuntu6.7MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.