CVE-2021-47215
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk40th percentile - higher than 40% of all known CVEs
Summary
In the Linux kernel, the mlx5e driver (for Mellanox network cards) has a bug in the TLS RX resync flow, causing a crash. The list of TLS contexts is vulnerable to corruption due to lack of protection of entries against movements from resync_handle_seq_match() until their resync handling in napi is fully completed.
Risk Assessment
The vulnerability may cause system crashes in environments using kTLS on Mellanox cards, potentially disrupting network services.
Recommendation
Apply the Linux kernel update containing the fix for CVE-2021-47215. Update systems with Mellanox cards and kTLS enabled.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: kTLS, Fix crash in RX resync flow For the TLS RX resync flow, we maintain a list of TLS contexts that require some attention, to communicate their resync information to the HW. Here we fix list corruptions, by protecting the entries against movements coming from resync_handle_seq_match(), until their resync handling in napi is fully completed.