CVE-2021-47014

Summary

CVE-2021-47014 is a vulnerability in the Linux kernel that affects version 5.12.0-rc7 and above. In the net/sched module, there is a flaw in the act_ct function, which can result in a wild memory access when clearing fragments. This issue occurs during re-assembly and re-fragmentation testing, causing a crash and potentially leading to unintended memory accesses. The root cause is the overwriting of the skb cb (callback) when tcf_ct_handle_fragments() returns -EINPROGRESS. To mitigate this vulnerability, it is recommended to avoid overwriting the skb cb in such situations.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.