PT-2024-11195

CVE-2021-47146

·

تاريخ النشر

2021-05-17

·

تاريخ التحديث

2025-12-15

الوصف من

CVSS 4.0
6.8
متوسطة
المقاييسAV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.12.0
Description A vulnerability in the Linux kernel has been resolved, which could cause a kernel panic when the headroom size is too large in the mld newpack() function. This function does not allow high-order page allocation, only order-0 allocation is allowed. If the headroom size exceeds the allowed limit, a kernel panic could occur in skb put(). The vulnerability can be triggered using specific test commands that create a network namespace and configure IPv6 addresses.
Recommendations To resolve this issue, update the Linux kernel to a version that includes the fix for the mld newpack() function. Specifically, versions prior to 5.12.0 are affected, so updating to 5.12.0 or later should resolve the issue.
At the moment, there is no information about a newer version that contains a fix for this vulnerability, other than updating to version 5.12.0 or later.
قابلية الاستغلال
إصلاح
الباحثون
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
OESA-2024-1483
OESA-2024-1484
SUSE-SU-2024:1643-1
SUSE-SU-2024:1646-1
SUSE-SU-2024:1870-1
USN-7930-1
USN-7930-2
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾