Strix
26.1K

CVE-2021-23133

HIGHCVSS 7/10EPSS 0.48%

Last modified

CVE-2021-23133 is a high-severity vulnerability rated 7/10 on the CVSS scale. A race condition in Linux kernel SCTP sockets (net/sctp/socket.c) before 5.12-rc8 can lead to kernel privilege escalation from the context of a network service or an unprivileged process. If sctp_destroy_sock is called without sock_net(sk)->sctp.addr_wq_lock then an element is removed from the auto_asconf_splist list without any proper locking. EPSS estimates a 0.48% chance of exploitation in the next 30 days.

Description

A race condition in Linux kernel SCTP sockets (net/sctp/socket.c) before 5.12-rc8 can lead to kernel privilege escalation from the context of a network service or an unprivileged process. If sctp_destroy_sock is called without sock_net(sk)->sctp.addr_wq_lock then an element is removed from the auto_asconf_splist list without any proper locking. This can be exploited by an attacker with network service privileges to escalate to root or from the context of an unprivileged user directly if a BPF_CGROUP_INET_SOCK_CREATE is attached which denies creation of some SCTP socket.

Metrics

CVSS 3.1
7/10

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Probability
0.48%

37.9th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
LinuxLinux Kernel>= 4.10, < 4.14.232
LinuxLinux Kernel>= 4.15, < 4.19.189
LinuxLinux Kernel>= 4.20, < 5.4.114
LinuxLinux Kernel>= 5.5, < 5.10.32
LinuxLinux Kernel>= 5.11, < 5.11.16
FedoraprojectFedora32
FedoraprojectFedora33
FedoraprojectFedora34
DebianDebian Linux9.0
NetappCloud BackupAll versions
NetappSolidfire \& Hci Management NodeAll versions
BroadcomBrocade Fabric Operating SystemAll versions
NetappH410c FirmwareAll versions
NetappH300s FirmwareAll versions
NetappH500s FirmwareAll versions
NetappH700s FirmwareAll versions
NetappH300e FirmwareAll versions
NetappH500e FirmwareAll versions
NetappH700e FirmwareAll versions
NetappH410s FirmwareAll versions
NetappSolidfire Baseboard Management Controller FirmwareAll versions

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2021-23133?
A race condition in Linux kernel SCTP sockets (net/sctp/socket.c) before 5.12-rc8 can lead to kernel privilege escalation from the context of a network service or an unprivileged process. If sctp_destroy_sock is called without sock_net(sk)->sctp.addr_wq_lock then an element is removed from the auto_asconf_splist list without any proper locking. This can be exploited by an attacker with network service privileges to escalate to root or from the context of an unprivileged user directly if a BPF_CGROUP_INET_SOCK_CREATE is attached which denies creation of some SCTP socket.
How severe is CVE-2021-23133?
CVE-2021-23133 has a CVSS score of 7/10 (HIGH severity). The EPSS model estimates a 0.48% probability of exploitation in the next 30 days.
How do I fix CVE-2021-23133?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2021-23133?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST