Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Kaustubh Pandey

Researcher fromCode Aurora
#34787of 56,330
7.8Total CVSS
Vulnerabilities · 1
PT-2024-11255
7.8
2021-06-09
Linux · Linux Kernel · CVE-2021-47248
**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** The issue is caused by a race between `close()` and `udp abort()` functions, which both acquire the socket lock. However, `udp{v6} destroy sock()` releases the lock before performing destructive actions, leading to a potential panic in `udp lib lookup()`. To prevent this, the `SOCK DEAD` flag is used to stop `udp abort()` from taking any action when the critical race occurs. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.