CVE-2021-47069

Summary

CVE-2021-47069 is a vulnerability in the Linux kernel that affects the ipc/mqueue, msg, and sem subsystems. The issue lies in the usage of stack references in do_mq_timedreceive and do_mq_timedsend functions. In a race condition, do_mq_timedreceive may return before do_mq_timedsend, leaving the latter with an invalid address. This can lead to a crash when do_mq_timedsend attempts to wake up a task using the invalid address. To mitigate this vulnerability, do_mq_timedsend should call wake_q_add_safe on the receiver's task_struct instead of dereferencing the receiver's stack address. This issue also exists in ipc/msg.c and ipc/sem.c, and these components should be addressed in the same manner.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.