CVE-2021-47223

In the Linux kernel, the following vulnerability has been resolved: net: bridge: fix vlan tunnel dst null pointer dereference This patch fixes a tunnel_dst null pointer dereference due to lockless access in the tunnel egress path. When deleting a vlan tunnel the tunnel_dst pointer is set to NULL without waiting a grace period (i.e. while it's still usable) and packets egressing are dereferencing it without checking. Use READ/WRITE_ONCE to annotate the lockless use of tunnel_id, use RCU for accessing tunnel_dst and make sure it is read only once and checked in the egress path. The dst is already properly RCU protected so we don't need to do anything fancy than to make sure tunnel_id and tunnel_dst are read only once and checked in the egress path.

• CWE-476

• https://git.kernel.org/stable/c/24a6e55f17aa123bc1fc54b7d3c410b41bc16530Patch
• https://git.kernel.org/stable/c/58e2071742e38f29f051b709a5cca014ba51166fPatch
• https://git.kernel.org/stable/c/a2241e62f6b4a774d8a92048fdf59c45f6c2fe5cPatch
• https://git.kernel.org/stable/c/abb02e05cb1c0a30dd873a29f33bc092067dc35dPatch
• https://git.kernel.org/stable/c/ad7feefe7164892db424c45687472db803d87f79Patch
• https://git.kernel.org/stable/c/fe0448a3fad365a747283a00a1d1ad5e8d6675b7Patch
• https://git.kernel.org/stable/c/24a6e55f17aa123bc1fc54b7d3c410b41bc16530Patch
• https://git.kernel.org/stable/c/58e2071742e38f29f051b709a5cca014ba51166fPatch
• https://git.kernel.org/stable/c/a2241e62f6b4a774d8a92048fdf59c45f6c2fe5cPatch
• https://git.kernel.org/stable/c/abb02e05cb1c0a30dd873a29f33bc092067dc35dPatch
• https://git.kernel.org/stable/c/ad7feefe7164892db424c45687472db803d87f79Patch
• https://git.kernel.org/stable/c/fe0448a3fad365a747283a00a1d1ad5e8d6675b7Patch

Published

May 21, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-47217In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2021-47218In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2021-47219In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2021-47220Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2021-47221In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2021-47222In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2021-47224In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2021-47225In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2021-47226In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2021-47227In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2021-47228In the Linux kernel, the following vulnerability has been re…6.2
• CVE-2021-47229In the Linux kernel, the following vulnerability has been re…5.5