CVE-2021-47026

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-clt: destroy sysfs after removing session from active list A session can be removed dynamically by sysfs interface "remove_path" that eventually calls rtrs_clt_remove_path_from_sysfs function. The current rtrs_clt_remove_path_from_sysfs first removes the sysfs interfaces and frees sess->stats object. Second it removes the session from the active list. Therefore some functions could access non-connected session and access the freed sess->stats object even-if they check the session status before accessing the session. For instance rtrs_clt_request and get_next_path_min_inflight check the session status and try to send IO to the session. The session status could be changed when they are trying to send IO but they could not catch the change and update the statistics information in sess->stats object, and generate use-after-free problem. (see: "RDMA/rtrs-clt: Check state of the rtrs_clt_sess before reading its stats") This patch changes the rtrs_clt_remove_path_from_sysfs to remove the session from the active session list and then destroy the sysfs interfaces. Each function still should check the session status because closing or error recovery paths can change the status.

• CWE-416

• https://git.kernel.org/stable/c/676171f9405dcaa45a33d18241c32f387dbaae39Patch
• https://git.kernel.org/stable/c/7f4a8592ff29f19c5a2ca549d0973821319afaadPatch
• https://git.kernel.org/stable/c/b64415c6b3476cf9fa4d0aea3807065b8403a937Patch
• https://git.kernel.org/stable/c/d3cca8067d43dfee4a3535c645b55f618708dccbPatch
• https://git.kernel.org/stable/c/676171f9405dcaa45a33d18241c32f387dbaae39Patch
• https://git.kernel.org/stable/c/7f4a8592ff29f19c5a2ca549d0973821319afaadPatch
• https://git.kernel.org/stable/c/b64415c6b3476cf9fa4d0aea3807065b8403a937Patch
• https://git.kernel.org/stable/c/d3cca8067d43dfee4a3535c645b55f618708dccbPatch

Published

Feb 28, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-47020In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2021-47021In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2021-47022In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2021-47023In the Linux kernel, the following vulnerability has been re…8.2
• CVE-2021-47024In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2021-47025In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2021-47027In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2021-47028In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2021-47029In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2021-47030In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2021-47031In the Linux kernel, the following vulnerability has been re…4.3
• CVE-2021-47032In the Linux kernel, the following vulnerability has been re…5.5