CVE-2021-47132

Published: 15 March 2024

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix sk_forward_memory corruption on retransmission MPTCP sk_forward_memory handling is a bit special, as such field is protected by the msk socket spin_lock, instead of the plain socket lock. Currently we have a code path updating such field without handling the relevant lock: __mptcp_retrans() -> __mptcp_clean_una_wakeup() Several helpers in __mptcp_clean_una_wakeup() will update sk_forward_alloc, possibly causing such field corruption, as reported by Matthieu. Address the issue providing and using a new variant of blamed function which explicitly acquires the msk spin lock.

Priority

Status

Package	Release	Status
linux Launchpad, Ubuntu, Debian	bionic	Needs triage
	focal	Needs triage
	jammy	Needs triage
	mantic	Needs triage
	trusty	Needs triage
	upstream	Not vulnerable (debian: Vulnerable code not present)
	xenial	Needs triage
	Patches: Introduced by 64b9cea7a0afe579dd2682f1f1c04f2e4e72fd25 Fixed by b5941f066b4ca331db225a976dae1d6ca8cf0ae3
linux-allwinner-5.19 Launchpad, Ubuntu, Debian	focal	Does not exist
	jammy	Ignored (end of kernel support)
	mantic	Does not exist
	upstream	Ignored (end of life)
linux-aws Launchpad, Ubuntu, Debian	bionic	Needs triage
	focal	Needs triage
	jammy	Needs triage
	mantic	Needs triage
	trusty	Needs triage
	upstream	Needs triage
	xenial	Needs triage
linux-aws-5.0 Launchpad, Ubuntu, Debian	bionic	Ignored (superseded by linux-aws-5.3)
	focal	Does not exist
	jammy	Does not exist
	mantic	Does not exist
	upstream	Ignored (superseded by linux-aws-5.3)
linux-aws-5.11 Launchpad, Ubuntu, Debian	focal	Ignored (superseded by linux-aws-5.13)
	jammy	Does not exist
	mantic	Does not exist
	upstream	Ignored (superseded by linux-aws-5.13)
linux-aws-5.13 Launchpad, Ubuntu, Debian	focal	Ignored (superseded by linux-aws-5.15)
	jammy	Does not exist
	mantic	Does not exist
	upstream	Ignored (superseded by linux-aws-5.15)
linux-aws-5.15 Launchpad, Ubuntu, Debian	focal	Needs triage
	jammy	Does not exist
	mantic	Does not exist
	upstream	Needs triage
linux-aws-5.19 Launchpad, Ubuntu, Debian	focal	Does not exist
	jammy	Ignored (superseded by linux-aws-6.2)
	mantic	Does not exist
	upstream	Ignored (superseded by linux-aws-6.2)
linux-aws-5.3 Launchpad, Ubuntu, Debian	bionic	Ignored (superseded by linux-aws-5.4)
	focal	Does not exist
	jammy	Does not exist
	mantic	Does not exist
	upstream	Ignored (superseded by linux-aws-5.4)
linux-aws-5.4 Launchpad, Ubuntu, Debian	bionic	Needs triage
	focal	Does not exist
	jammy	Does not exist
	mantic	Does not exist
	upstream	Needs triage
linux-aws-5.8 Launchpad, Ubuntu, Debian	focal	Ignored (superseded by linux-aws-5.11)
	jammy	Does not exist
	mantic	Does not exist
	upstream	Ignored (superseded by linux-aws-5.11)
linux-aws-6.2 Launchpad, Ubuntu, Debian	focal	Does not exist
	jammy	Ignored (superseded by linux-aws-6.5)
	mantic	Does not exist
	upstream	Ignored (superseded by linux-aws-6.5)
linux-aws-6.5 Launchpad, Ubuntu, Debian	focal	Does not exist
	jammy	Needs triage
	mantic	Does not exist
	upstream	Needs triage
linux-aws-hwe Launchpad, Ubuntu, Debian	focal	Does not exist
	jammy	Does not exist
	mantic	Does not exist
	upstream	Needs triage
	xenial	Needs triage
linux-azure Launchpad, Ubuntu, Debian	bionic	Ignored (superseded by linux-azure-5.3)
	focal	Needs triage
	jammy	Needs triage
	mantic	Needs triage
	trusty	Needs triage
	upstream	Needs triage
	xenial	Needs triage
linux-azure-4.15 Launchpad, Ubuntu, Debian	bionic	Needs triage
	focal	Does not exist
	jammy	Does not exist
	mantic	Does not exist
	upstream	Needs triage
linux-azure-5.11 Launchpad, Ubuntu, Debian	focal	Ignored (superseded by linux-azure-5.13)
	jammy	Does not exist
	mantic	Does not exist
	upstream	Ignored (superseded by linux-azure-5.13)
linux-azure-5.13 Launchpad, Ubuntu, Debian	focal	Ignored (superseded by linux-azure-5.15)
	jammy	Does not exist
	mantic	Does not exist
	upstream	Ignored (superseded by linux-azure-5.15)
linux-azure-5.15 Launchpad, Ubuntu, Debian	focal	Needs triage
	jammy	Does not exist
	mantic	Does not exist
	upstream	Needs triage
linux-azure-5.19 Launchpad, Ubuntu, Debian	focal	Does not exist
	jammy	Ignored (superseded by linux-azure-6.2)
	mantic	Does not exist
	upstream	Ignored (superseded by linux-azure-6.2)
linux-azure-5.3 Launchpad, Ubuntu, Debian	bionic	Ignored (superseded by linux-azure-5.4)
	focal	Does not exist
	jammy	Does not exist
	mantic	Does not exist
	upstream	Ignored (superseded by linux-azure-5.4)
linux-azure-5.4 Launchpad, Ubuntu, Debian	bionic	Needs triage
	focal	Does not exist
	jammy	Does not exist
	mantic	Does not exist
	upstream	Needs triage
linux-azure-5.8 Launchpad, Ubuntu, Debian	focal	Ignored (superseded by linux-azure-5.11)
	jammy	Does not exist
	mantic	Does not exist
	upstream	Ignored (superseded by linux-azure-5.11)
linux-azure-6.2 Launchpad, Ubuntu, Debian	focal	Does not exist
	jammy	Ignored (superseded by linux-azure-6.5)
	mantic	Does not exist
	upstream	Ignored (superseded by linux-azure-6.5)
linux-azure-6.5 Launchpad, Ubuntu, Debian	focal	Does not exist
	jammy	Needs triage
	mantic	Does not exist
	upstream	Needs triage
linux-azure-edge Launchpad, Ubuntu, Debian	bionic	Ignored (superseded by linux-azure-5.3)
	focal	Does not exist
	jammy	Does not exist
	mantic	Does not exist
	upstream	Ignored (superseded by linux-azure-5.3)
linux-azure-fde Launchpad, Ubuntu, Debian	focal	Ignored (superseded by linux-azure-fde-5.15)
	jammy	Needs triage
	mantic	Does not exist
	upstream	Needs triage
linux-azure-fde-5.15 Launchpad, Ubuntu, Debian	focal	Needs triage
	jammy	Does not exist
	mantic	Does not exist
	upstream	Needs triage
linux-azure-fde-5.19 Launchpad, Ubuntu, Debian	focal	Does not exist
	jammy	Ignored (superseded by linux-azure-fde-6.2)
	mantic	Does not exist
	upstream	Ignored (superseded by linux-azure-fde-6.2)
linux-azure-fde-6.2 Launchpad, Ubuntu, Debian	focal	Does not exist
	jammy	Ignored (replaced by linux-azure-6.5)
	mantic	Does not exist
	upstream	Ignored (replaced by linux-azure-6.5)
linux-bluefield Launchpad, Ubuntu, Debian	focal	Needs triage
	jammy	Does not exist
	mantic	Does not exist
	upstream	Needs triage
linux-fips Launchpad, Ubuntu, Debian	focal	Does not exist
	jammy	Does not exist
	mantic	Does not exist
	upstream	Needs triage
linux-gcp Launchpad, Ubuntu, Debian	bionic	Ignored (superseded by linux-gcp-5.3)
	focal	Needs triage
	jammy	Needs triage
	mantic	Needs triage
	upstream	Needs triage
	xenial	Needs triage
linux-gcp-4.15 Launchpad, Ubuntu, Debian	bionic	Needs triage
	focal	Does not exist
	jammy	Does not exist
	mantic	Does not exist
	upstream	Needs triage
linux-gcp-5.11 Launchpad, Ubuntu, Debian	focal	Ignored (superseded by linux-gcp-5.13)
	jammy	Does not exist
	mantic	Does not exist
	upstream	Ignored (superseded by linux-gcp-5.13)
linux-gcp-5.13 Launchpad, Ubuntu, Debian	focal	Ignored (superseded by linux-gcp-5.15)
	jammy	Does not exist
	mantic	Does not exist
	upstream	Ignored (superseded by linux-gcp-5.15)
linux-gcp-5.15 Launchpad, Ubuntu, Debian	focal	Needs triage
	jammy	Does not exist
	mantic	Does not exist
	upstream	Needs triage
linux-gcp-5.19 Launchpad, Ubuntu, Debian	focal	Does not exist
	jammy	Ignored (superseded by linux-gcp-6.2)
	mantic	Does not exist
	upstream	Ignored (superseded by linux-gcp-6.2)
linux-gcp-5.3 Launchpad, Ubuntu, Debian	bionic	Ignored (superseded by linux-gcp-5.4)
	focal	Does not exist
	jammy	Does not exist
	mantic	Does not exist
	upstream	Ignored (superseded by linux-gcp-5.4)
linux-gcp-5.4 Launchpad, Ubuntu, Debian	bionic	Needs triage
	focal	Does not exist
	jammy	Does not exist
	mantic	Does not exist
	upstream	Needs triage
linux-gcp-5.8 Launchpad, Ubuntu, Debian	focal	Ignored (superseded by linux-gcp-5.11)
	jammy	Does not exist
	mantic	Does not exist
	upstream	Ignored (superseded by linux-gcp-5.11)
linux-gcp-6.2 Launchpad, Ubuntu, Debian	focal	Does not exist
	jammy	Ignored (superseded by linux-gcp-6.5)
	mantic	Does not exist
	upstream	Ignored (superseded by linux-gcp-6.5)
linux-gcp-6.5 Launchpad, Ubuntu, Debian	focal	Does not exist
	jammy	Needs triage
	mantic	Does not exist
	upstream	Needs triage
linux-gke Launchpad, Ubuntu, Debian	focal	Ignored (end of kernel support)
	jammy	Needs triage
	mantic	Does not exist
	upstream	Needs triage
linux-gke-4.15 Launchpad, Ubuntu, Debian	bionic	Ignored (superseded by linux-gke-5.0)
	focal	Does not exist
	jammy	Does not exist
	mantic	Does not exist
	upstream	Ignored (superseded by linux-gke-5.0)
linux-gke-5.15 Launchpad, Ubuntu, Debian	focal	Ignored (end of kernel support)
	jammy	Does not exist
	mantic	Does not exist
	upstream	Ignored (end of life)
linux-gke-5.4 Launchpad, Ubuntu, Debian	bionic	Ignored (end of kernel support)
	focal	Does not exist
	jammy	Does not exist
	mantic	Does not exist
	upstream	Ignored (end of life)
linux-gkeop Launchpad, Ubuntu, Debian	focal	Needs triage
	jammy	Needs triage
	mantic	Does not exist
	upstream	Needs triage
linux-gkeop-5.15 Launchpad, Ubuntu, Debian	focal	Needs triage
	jammy	Does not exist
	mantic	Does not exist
	upstream	Needs triage
linux-gkeop-5.4 Launchpad, Ubuntu, Debian	bionic	Ignored (end of kernel support)
	focal	Does not exist
	jammy	Does not exist
	mantic	Does not exist
	upstream	Ignored (end of life)
linux-hwe Launchpad, Ubuntu, Debian	bionic	Ignored (replaced by linux-hwe-5.4)
	focal	Does not exist
	jammy	Does not exist
	mantic	Does not exist
	upstream	Needs triage
	xenial	Needs triage
linux-hwe-5.11 Launchpad, Ubuntu, Debian	focal	Ignored (superseded by linux-hwe-5.13)
	jammy	Does not exist
	mantic	Does not exist
	upstream	Ignored (superseded by linux-hwe-5.13)
linux-hwe-5.13 Launchpad, Ubuntu, Debian	focal	Ignored (superseded by linux-hwe-5.15)
	jammy	Does not exist
	mantic	Does not exist
	upstream	Ignored (superseded by linux-hwe-5.15)
linux-hwe-5.15 Launchpad, Ubuntu, Debian	focal	Needs triage
	jammy	Does not exist
	mantic	Does not exist
	upstream	Needs triage
linux-hwe-5.19 Launchpad, Ubuntu, Debian	focal	Does not exist
	jammy	Ignored (superseded by linux-hwe-6.2)
	mantic	Does not exist
	upstream	Ignored (superseded by linux-hwe-6.2)
linux-hwe-5.4 Launchpad, Ubuntu, Debian	bionic	Needs triage
	focal	Does not exist
	jammy	Does not exist
	mantic	Does not exist
	upstream	Needs triage
linux-hwe-5.8 Launchpad, Ubuntu, Debian	focal	Ignored (superseded by linux-hwe-5.11)
	jammy	Does not exist
	mantic	Does not exist
	upstream	Ignored (superseded by linux-hwe-5.11)
linux-hwe-6.2 Launchpad, Ubuntu, Debian	focal	Does not exist
	jammy	Ignored (superseded by linux-hwe-6.5)
	mantic	Does not exist
	upstream	Ignored (superseded by linux-hwe-6.5)
linux-hwe-6.5 Launchpad, Ubuntu, Debian	focal	Does not exist
	jammy	Needs triage
	mantic	Does not exist
	upstream	Needs triage
linux-hwe-edge Launchpad, Ubuntu, Debian	bionic	Ignored (superseded by linux-hwe-5.4)
	focal	Does not exist
	jammy	Does not exist
	mantic	Does not exist
	upstream	Ignored (end of life)
	xenial	Ignored (superseded by linux-hwe)
linux-ibm Launchpad, Ubuntu, Debian	focal	Needs triage
	jammy	Needs triage
	mantic	Ignored (end of kernel support)
	upstream	Needs triage
linux-ibm-5.15 Launchpad, Ubuntu, Debian	focal	Needs triage
	jammy	Does not exist
	mantic	Does not exist
	upstream	Needs triage
linux-ibm-5.4 Launchpad, Ubuntu, Debian	bionic	Needs triage
	focal	Does not exist
	jammy	Does not exist
	mantic	Does not exist
	upstream	Needs triage
linux-intel-5.13 Launchpad, Ubuntu, Debian	focal	Ignored (end of kernel support)
	jammy	Does not exist
	mantic	Does not exist
	upstream	Ignored (end of life)
linux-intel-iotg Launchpad, Ubuntu, Debian	focal	Does not exist
	jammy	Needs triage
	mantic	Does not exist
	upstream	Needs triage
linux-intel-iotg-5.15 Launchpad, Ubuntu, Debian	focal	Needs triage
	jammy	Does not exist
	mantic	Does not exist
	upstream	Needs triage
linux-iot Launchpad, Ubuntu, Debian	focal	Needs triage
	jammy	Does not exist
	mantic	Does not exist
	upstream	Needs triage
linux-kvm Launchpad, Ubuntu, Debian	bionic	Needs triage
	focal	Needs triage
	jammy	Needs triage
	mantic	Does not exist
	upstream	Needs triage
	xenial	Needs triage
linux-laptop Launchpad, Ubuntu, Debian	focal	Does not exist
	jammy	Does not exist
	mantic	Needs triage
	upstream	Needs triage
linux-lowlatency Launchpad, Ubuntu, Debian	focal	Does not exist
	jammy	Needs triage
	mantic	Needs triage
	upstream	Needs triage
linux-lowlatency-hwe-5.15 Launchpad, Ubuntu, Debian	focal	Needs triage
	jammy	Does not exist
	mantic	Does not exist
	upstream	Needs triage
linux-lowlatency-hwe-5.19 Launchpad, Ubuntu, Debian	focal	Does not exist
	jammy	Ignored (superseded by linux-lowlatency-hwe-6.2)
	mantic	Does not exist
	upstream	Ignored (superseded by linux-lowlatency-hwe-6.2)
linux-lowlatency-hwe-6.2 Launchpad, Ubuntu, Debian	focal	Does not exist
	jammy	Ignored (superseded by linux-lowlatency-hwe-6.5)
	mantic	Does not exist
	upstream	Ignored (superseded by linux-lowlatency-hwe-6.5)
linux-lowlatency-hwe-6.5 Launchpad, Ubuntu, Debian	focal	Does not exist
	jammy	Needs triage
	mantic	Does not exist
	upstream	Needs triage
linux-lts-xenial Launchpad, Ubuntu, Debian	focal	Does not exist
	jammy	Does not exist
	mantic	Does not exist
	trusty	Needs triage
	upstream	Needs triage
linux-nvidia Launchpad, Ubuntu, Debian	focal	Does not exist
	jammy	Needs triage
	mantic	Does not exist
	upstream	Needs triage
linux-nvidia-6.2 Launchpad, Ubuntu, Debian	focal	Does not exist
	jammy	Ignored (superseded by linux-nvidia-6.5)
	mantic	Does not exist
	upstream	Ignored (superseded by linux-nvidia-6.5)
linux-nvidia-6.5 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	jammy	Needs triage
	mantic	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Does not exist
linux-oem Launchpad, Ubuntu, Debian	bionic	Ignored (replaced by linux-hwe-5.4)
	focal	Does not exist
	jammy	Does not exist
	mantic	Does not exist
	upstream	Ignored (end of life)
linux-oem-5.10 Launchpad, Ubuntu, Debian	focal	Ignored (superseded by linux-oem-5.13)
	jammy	Does not exist
	mantic	Does not exist
	upstream	Ignored (superseded by linux-oem-5.13)
linux-oem-5.13 Launchpad, Ubuntu, Debian	focal	Ignored (superseded by linux-oem-5.14)
	jammy	Does not exist
	mantic	Does not exist
	upstream	Ignored (superseded by linux-oem-5.14)
linux-oem-5.14 Launchpad, Ubuntu, Debian	focal	Ignored (replaced by linux-hwe-5.15)
	jammy	Does not exist
	mantic	Does not exist
	upstream	Ignored (replaced by linux-hwe-5.15)
linux-oem-5.17 Launchpad, Ubuntu, Debian	focal	Does not exist
	jammy	Ignored (superseded by linux-oem-6.1)
	mantic	Does not exist
	upstream	Ignored (superseded by linux-oem-6.1)
linux-oem-5.6 Launchpad, Ubuntu, Debian	focal	Ignored (superseded by linux-oem-5.10)
	jammy	Does not exist
	mantic	Does not exist
	upstream	Ignored (superseded by linux-oem-5.10)
linux-oem-6.0 Launchpad, Ubuntu, Debian	focal	Does not exist
	jammy	Ignored (superseded by linux-oem-6.1)
	mantic	Does not exist
	upstream	Ignored (superseded by linux-oem-6.1)
linux-oem-6.1 Launchpad, Ubuntu, Debian	focal	Does not exist
	jammy	Ignored (superseded by linux-oem-6.5, was needs-triage)
	mantic	Does not exist
	upstream	Ignored (superseded by linux-oem-6.5, was needs-triage)
linux-oem-6.5 Launchpad, Ubuntu, Debian	focal	Does not exist
	jammy	Needs triage
	mantic	Does not exist
	upstream	Needs triage
linux-oracle Launchpad, Ubuntu, Debian	bionic	Needs triage
	focal	Needs triage
	jammy	Needs triage
	mantic	Needs triage
	upstream	Needs triage
	xenial	Needs triage
linux-oracle-5.0 Launchpad, Ubuntu, Debian	bionic	Ignored (superseded by linux-oracle-5.3)
	focal	Does not exist
	jammy	Does not exist
	mantic	Does not exist
	upstream	Ignored (superseded by linux-oracle-5.3)
linux-oracle-5.11 Launchpad, Ubuntu, Debian	focal	Ignored (superseded by linux-oracle-5.13)
	jammy	Does not exist
	mantic	Does not exist
	upstream	Ignored (superseded by linux-oracle-5.13)
linux-oracle-5.13 Launchpad, Ubuntu, Debian	focal	Ignored (superseded by linux-oracle-5.15)
	jammy	Does not exist
	mantic	Does not exist
	upstream	Ignored (superseded by linux-oracle-5.15)
linux-oracle-5.15 Launchpad, Ubuntu, Debian	focal	Needs triage
	jammy	Does not exist
	mantic	Does not exist
	upstream	Needs triage
linux-oracle-5.3 Launchpad, Ubuntu, Debian	bionic	Ignored (superseded by linux-oracle-5.4)
	focal	Does not exist
	jammy	Does not exist
	mantic	Does not exist
	upstream	Ignored (superseded by linux-oracle-5.4)
linux-oracle-5.4 Launchpad, Ubuntu, Debian	bionic	Needs triage
	focal	Does not exist
	jammy	Does not exist
	mantic	Does not exist
	upstream	Needs triage
linux-oracle-5.8 Launchpad, Ubuntu, Debian	focal	Ignored (superseded by linux-oracle-5.11)
	jammy	Does not exist
	mantic	Does not exist
	upstream	Ignored (superseded by linux-oracle-5.11)
linux-oracle-6.5 Launchpad, Ubuntu, Debian	focal	Does not exist
	jammy	Needs triage
	mantic	Does not exist
	upstream	Needs triage
linux-raspi Launchpad, Ubuntu, Debian	focal	Needs triage
	jammy	Needs triage
	mantic	Needs triage
	upstream	Needs triage
linux-raspi-5.4 Launchpad, Ubuntu, Debian	bionic	Needs triage
	focal	Does not exist
	jammy	Does not exist
	mantic	Does not exist
	upstream	Needs triage
linux-raspi2 Launchpad, Ubuntu, Debian	focal	Ignored (replaced by linux-raspi)
	jammy	Does not exist
	mantic	Does not exist
	upstream	Ignored (replaced by linux-raspi)
linux-riscv Launchpad, Ubuntu, Debian	focal	Ignored (superseded by linux-riscv-5.8)
	jammy	Ignored (end of kernel support)
	mantic	Needs triage
	upstream	Needs triage
linux-riscv-5.11 Launchpad, Ubuntu, Debian	focal	Ignored (superseded by linux-riscv-5.13)
	jammy	Does not exist
	mantic	Does not exist
	upstream	Ignored (superseded by linux-riscv-5.13)
linux-riscv-5.15 Launchpad, Ubuntu, Debian	focal	Needs triage
	jammy	Does not exist
	mantic	Does not exist
	upstream	Needs triage
linux-riscv-5.19 Launchpad, Ubuntu, Debian	focal	Does not exist
	jammy	Ignored (end of kernel support)
	mantic	Does not exist
	upstream	Ignored (end of life)
linux-riscv-5.8 Launchpad, Ubuntu, Debian	focal	Ignored (superseded by linux-riscv-5.11)
	jammy	Does not exist
	mantic	Does not exist
	upstream	Ignored (superseded by linux-riscv-5.11)
linux-riscv-6.5 Launchpad, Ubuntu, Debian	focal	Does not exist
	jammy	Needs triage
	mantic	Does not exist
	upstream	Needs triage
linux-starfive Launchpad, Ubuntu, Debian	focal	Does not exist
	jammy	Does not exist
	mantic	Needs triage
	upstream	Needs triage
linux-starfive-5.19 Launchpad, Ubuntu, Debian	focal	Does not exist
	jammy	Ignored (end of kernel support)
	mantic	Does not exist
	upstream	Ignored (end of life)
linux-starfive-6.2 Launchpad, Ubuntu, Debian	focal	Does not exist
	jammy	Ignored (superseded by linux-starfive-6.5)
	mantic	Does not exist
	upstream	Ignored (superseded by linux-starfive-6.5)
linux-starfive-6.5 Launchpad, Ubuntu, Debian	focal	Does not exist
	jammy	Needs triage
	mantic	Does not exist
	upstream	Needs triage
linux-xilinx-zynqmp Launchpad, Ubuntu, Debian	focal	Needs triage
	jammy	Needs triage
	mantic	Does not exist
	upstream	Needs triage

References

Bugs

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2021-47132

Join the discussion

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›