CVE-2021-47419

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.14.0-rc6-syzkaller

Description The issue is related to the sch taprio module in the Linux kernel, where a timer is not properly canceled when the taprio destroy() function is called. This can lead to a use-after-free error, potentially causing a system crash or allowing an attacker to execute arbitrary code. The vulnerability was reported by syzbot and is related to the qdisc create() function not calling ops->reset() in some cases.

Recommendations To resolve this issue, update the Linux kernel to a version that includes the fix for the sch taprio module. Specifically, update to a version later than 5.14.0-rc6-syzkaller. If an update is not possible, consider disabling the sch taprio module as a temporary workaround to prevent potential exploitation.