CVE-2021-47152

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix data stream corruption Maxim reported several issues when forcing a TCP transparent proxy to use the MPTCP protocol for the inbound connections. He also provided a clean reproducer. The problem boils down to 'mptcp_frag_can_collapse_to()' assuming that only MPTCP will use the given page_frag. If others - e.g. the plain TCP protocol - allocate page fragments, we can end-up re-using already allocated memory for mptcp_data_frag. Fix the issue ensuring that the to-be-expanded data fragment is located at the current page frag end. v1 -> v2: - added missing fixes tag (Mat)

• CWE-787

• https://git.kernel.org/stable/c/18e7f0580da15cac1e79d73683ada5a9e70980f8Patch
• https://git.kernel.org/stable/c/29249eac5225429b898f278230a6ca2baa1ae154Patch
• https://git.kernel.org/stable/c/3267a061096efc91eda52c2a0c61ba76e46e4b34Patch
• https://git.kernel.org/stable/c/18e7f0580da15cac1e79d73683ada5a9e70980f8Patch
• https://git.kernel.org/stable/c/29249eac5225429b898f278230a6ca2baa1ae154Patch
• https://git.kernel.org/stable/c/3267a061096efc91eda52c2a0c61ba76e46e4b34Patch

Published

Mar 25, 2024

Last Modified

Aug 4, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-47146In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2021-47147In the Linux kernel, the following vulnerability has been re…6.2
• CVE-2021-47148In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2021-47149In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2021-47150In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2021-47151In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2021-47153In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2021-47154The Net::CIDR::Lite module before 0.22 for Perl does not pro…6.3
• CVE-2021-47155The Net::IPV4Addr module 0.10 for Perl does not properly con…9.1
• CVE-2021-47156The Net::IPAddress::Util module before 5.000 for Perl does n…6.5
• CVE-2021-47157The Kossy module before 0.60 for Perl allows JSON hijacking …9.8
• CVE-2021-47158In the Linux kernel, the following vulnerability has been re…5.5