CVE-2021-47593

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the mptcp component of the Linux kernel, which can cause a crash due to a null pointer dereference. This occurs when the sk->sk sock kern flag is not set correctly, allowing setsockopt to work for plain TCP sockets. In the case of a fallback, accept() can return a plain TCP socket that is still tagged as 'kernel', leading to a crash. The subflow extension has a NULL ctx->conn mptcp socket, resulting in a null pointer dereference in subflow data ready.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.