CVE-2021-47606 (GCVE-0-2021-47606)
Vulnerability from cvelistv5
Published
2024-06-19 14:54
Modified
2025-05-04 07:14
Severity ?
Summary
In the Linux kernel, the following vulnerability has been resolved: net: netlink: af_netlink: Prevent empty skb by adding a check on len. Adding a check on len parameter to avoid empty skb. This prevents a division error in netem_enqueue function which is caused when skb->len=0 and skb->data_len=0 in the randomized corruption step as shown below. skb->data[prandom_u32() % skb_headlen(skb)] ^= 1<<(prandom_u32() % 8); Crash Report: [ 343.170349] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.216110] netem: version 1.3 [ 343.235841] divide error: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 343.236680] CPU: 3 PID: 4288 Comm: reproducer Not tainted 5.16.0-rc1+ [ 343.237569] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.11.0-2.el7 04/01/2014 [ 343.238707] RIP: 0010:netem_enqueue+0x1590/0x33c0 [sch_netem] [ 343.239499] Code: 89 85 58 ff ff ff e8 5f 5d e9 d3 48 8b b5 48 ff ff ff 8b 8d 50 ff ff ff 8b 85 58 ff ff ff 48 8b bd 70 ff ff ff 31 d2 2b 4f 74 <f7> f1 48 b8 00 00 00 00 00 fc ff df 49 01 d5 4c 89 e9 48 c1 e9 03 [ 343.241883] RSP: 0018:ffff88800bcd7368 EFLAGS: 00010246 [ 343.242589] RAX: 00000000ba7c0a9c RBX: 0000000000000001 RCX: 0000000000000000 [ 343.243542] RDX: 0000000000000000 RSI: ffff88800f8edb10 RDI: ffff88800f8eda40 [ 343.244474] RBP: ffff88800bcd7458 R08: 0000000000000000 R09: ffffffff94fb8445 [ 343.245403] R10: ffffffff94fb8336 R11: ffffffff94fb8445 R12: 0000000000000000 [ 343.246355] R13: ffff88800a5a7000 R14: ffff88800a5b5800 R15: 0000000000000020 [ 343.247291] FS: 00007fdde2bd7700(0000) GS:ffff888109780000(0000) knlGS:0000000000000000 [ 343.248350] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 343.249120] CR2: 00000000200000c0 CR3: 000000000ef4c000 CR4: 00000000000006e0 [ 343.250076] Call Trace: [ 343.250423] <TASK> [ 343.250713] ? memcpy+0x4d/0x60 [ 343.251162] ? netem_init+0xa0/0xa0 [sch_netem] [ 343.251795] ? __sanitizer_cov_trace_pc+0x21/0x60 [ 343.252443] netem_enqueue+0xe28/0x33c0 [sch_netem] [ 343.253102] ? stack_trace_save+0x87/0xb0 [ 343.253655] ? filter_irq_stacks+0xb0/0xb0 [ 343.254220] ? netem_init+0xa0/0xa0 [sch_netem] [ 343.254837] ? __kasan_check_write+0x14/0x20 [ 343.255418] ? _raw_spin_lock+0x88/0xd6 [ 343.255953] dev_qdisc_enqueue+0x50/0x180 [ 343.256508] __dev_queue_xmit+0x1a7e/0x3090 [ 343.257083] ? netdev_core_pick_tx+0x300/0x300 [ 343.257690] ? check_kcov_mode+0x10/0x40 [ 343.258219] ? _raw_spin_unlock_irqrestore+0x29/0x40 [ 343.258899] ? __kasan_init_slab_obj+0x24/0x30 [ 343.259529] ? setup_object.isra.71+0x23/0x90 [ 343.260121] ? new_slab+0x26e/0x4b0 [ 343.260609] ? kasan_poison+0x3a/0x50 [ 343.261118] ? kasan_unpoison+0x28/0x50 [ 343.261637] ? __kasan_slab_alloc+0x71/0x90 [ 343.262214] ? memcpy+0x4d/0x60 [ 343.262674] ? write_comp_data+0x2f/0x90 [ 343.263209] ? __kasan_check_write+0x14/0x20 [ 343.263802] ? __skb_clone+0x5d6/0x840 [ 343.264329] ? __sanitizer_cov_trace_pc+0x21/0x60 [ 343.264958] dev_queue_xmit+0x1c/0x20 [ 343.265470] netlink_deliver_tap+0x652/0x9c0 [ 343.266067] netlink_unicast+0x5a0/0x7f0 [ 343.266608] ? netlink_attachskb+0x860/0x860 [ 343.267183] ? __sanitizer_cov_trace_pc+0x21/0x60 [ 343.267820] ? write_comp_data+0x2f/0x90 [ 343.268367] netlink_sendmsg+0x922/0xe80 [ 343.268899] ? netlink_unicast+0x7f0/0x7f0 [ 343.269472] ? __sanitizer_cov_trace_pc+0x21/0x60 [ 343.270099] ? write_comp_data+0x2f/0x90 [ 343.270644] ? netlink_unicast+0x7f0/0x7f0 [ 343.271210] sock_sendmsg+0x155/0x190 [ 343.271721] ____sys_sendmsg+0x75f/0x8f0 [ 343.272262] ? kernel_sendmsg+0x60/0x60 [ 343.272788] ? write_comp_data+0x2f/0x90 [ 343.273332] ? write_comp_data+0x2f/0x90 [ 343.273869] ___sys_sendmsg+0x10f/0x190 [ 343.274405] ? sendmsg_copy_msghdr+0x80/0x80 [ 343.274984] ? slab_post_alloc_hook+0x70/0x230 [ 343.275597] ? futex_wait_setup+0x240/0x240 [ 343.276175] ? security_file_alloc+0x3e/0x170 [ 343.276779] ? write_comp_d ---truncated---
References
416baaa9-dc9f-4396-8d5f-8c081fb06d67 https://git.kernel.org/stable/c/40cf2e058832d9cfaae98dfd77334926275598b6 Patch
416baaa9-dc9f-4396-8d5f-8c081fb06d67 https://git.kernel.org/stable/c/4c986072a8c9249b9398c7a18f216dc26a9f0e35 Patch
416baaa9-dc9f-4396-8d5f-8c081fb06d67 https://git.kernel.org/stable/c/54e785f7d5c197bc06dbb8053700df7e2a093ced Patch
416baaa9-dc9f-4396-8d5f-8c081fb06d67 https://git.kernel.org/stable/c/c0315e93552e0d840e9edc6abd71c7db82ec8f51 Patch
416baaa9-dc9f-4396-8d5f-8c081fb06d67 https://git.kernel.org/stable/c/c54a60c8fbaa774f828e26df79f66229a8a0e010 Patch
416baaa9-dc9f-4396-8d5f-8c081fb06d67 https://git.kernel.org/stable/c/dadce61247c6230489527cc5e343b6002d1114c5 Patch
416baaa9-dc9f-4396-8d5f-8c081fb06d67 https://git.kernel.org/stable/c/f123cffdd8fe8ea6c7fded4b88516a42798797d0 Patch
416baaa9-dc9f-4396-8d5f-8c081fb06d67 https://git.kernel.org/stable/c/ff3f517bf7138e01a17369042908a3f345c0ee41 Patch
af854a3a-2127-422b-91ae-364da2661108 https://git.kernel.org/stable/c/40cf2e058832d9cfaae98dfd77334926275598b6 Patch
af854a3a-2127-422b-91ae-364da2661108 https://git.kernel.org/stable/c/4c986072a8c9249b9398c7a18f216dc26a9f0e35 Patch
af854a3a-2127-422b-91ae-364da2661108 https://git.kernel.org/stable/c/54e785f7d5c197bc06dbb8053700df7e2a093ced Patch
af854a3a-2127-422b-91ae-364da2661108 https://git.kernel.org/stable/c/c0315e93552e0d840e9edc6abd71c7db82ec8f51 Patch
af854a3a-2127-422b-91ae-364da2661108 https://git.kernel.org/stable/c/c54a60c8fbaa774f828e26df79f66229a8a0e010 Patch
af854a3a-2127-422b-91ae-364da2661108 https://git.kernel.org/stable/c/dadce61247c6230489527cc5e343b6002d1114c5 Patch
af854a3a-2127-422b-91ae-364da2661108 https://git.kernel.org/stable/c/f123cffdd8fe8ea6c7fded4b88516a42798797d0 Patch
af854a3a-2127-422b-91ae-364da2661108 https://git.kernel.org/stable/c/ff3f517bf7138e01a17369042908a3f345c0ee41 Patch
Impacted products
Vendor Product Version
Linux Linux Version: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T05:47:40.217Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/c54a60c8fbaa774f828e26df79f66229a8a0e010"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/40cf2e058832d9cfaae98dfd77334926275598b6"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/54e785f7d5c197bc06dbb8053700df7e2a093ced"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/ff3f517bf7138e01a17369042908a3f345c0ee41"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/c0315e93552e0d840e9edc6abd71c7db82ec8f51"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/dadce61247c6230489527cc5e343b6002d1114c5"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/4c986072a8c9249b9398c7a18f216dc26a9f0e35"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/f123cffdd8fe8ea6c7fded4b88516a42798797d0"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2021-47606",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-10T17:12:08.038077Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-11T17:34:51.449Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/netlink/af_netlink.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "c54a60c8fbaa774f828e26df79f66229a8a0e010",
              "status": "affected",
              "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
              "versionType": "git"
            },
            {
              "lessThan": "40cf2e058832d9cfaae98dfd77334926275598b6",
              "status": "affected",
              "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
              "versionType": "git"
            },
            {
              "lessThan": "54e785f7d5c197bc06dbb8053700df7e2a093ced",
              "status": "affected",
              "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
              "versionType": "git"
            },
            {
              "lessThan": "ff3f517bf7138e01a17369042908a3f345c0ee41",
              "status": "affected",
              "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
              "versionType": "git"
            },
            {
              "lessThan": "c0315e93552e0d840e9edc6abd71c7db82ec8f51",
              "status": "affected",
              "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
              "versionType": "git"
            },
            {
              "lessThan": "dadce61247c6230489527cc5e343b6002d1114c5",
              "status": "affected",
              "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
              "versionType": "git"
            },
            {
              "lessThan": "4c986072a8c9249b9398c7a18f216dc26a9f0e35",
              "status": "affected",
              "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
              "versionType": "git"
            },
            {
              "lessThan": "f123cffdd8fe8ea6c7fded4b88516a42798797d0",
              "status": "affected",
              "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/netlink/af_netlink.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThanOrEqual": "4.4.*",
              "status": "unaffected",
              "version": "4.4.296",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.9.*",
              "status": "unaffected",
              "version": "4.9.294",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.259",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.222",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.167",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.87",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.10",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "5.16",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.4.296",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.9.294",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.259",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.222",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.167",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.87",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.16",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: netlink: af_netlink: Prevent empty skb by adding a check on len.\n\nAdding a check on len parameter to avoid empty skb. This prevents a\ndivision error in netem_enqueue function which is caused when skb-\u003elen=0\nand skb-\u003edata_len=0 in the randomized corruption step as shown below.\n\nskb-\u003edata[prandom_u32() % skb_headlen(skb)] ^= 1\u003c\u003c(prandom_u32() % 8);\n\nCrash Report:\n[  343.170349] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family\n0 port 6081 - 0\n[  343.216110] netem: version 1.3\n[  343.235841] divide error: 0000 [#1] PREEMPT SMP KASAN NOPTI\n[  343.236680] CPU: 3 PID: 4288 Comm: reproducer Not tainted 5.16.0-rc1+\n[  343.237569] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996),\nBIOS 1.11.0-2.el7 04/01/2014\n[  343.238707] RIP: 0010:netem_enqueue+0x1590/0x33c0 [sch_netem]\n[  343.239499] Code: 89 85 58 ff ff ff e8 5f 5d e9 d3 48 8b b5 48 ff ff\nff 8b 8d 50 ff ff ff 8b 85 58 ff ff ff 48 8b bd 70 ff ff ff 31 d2 2b 4f\n74 \u003cf7\u003e f1 48 b8 00 00 00 00 00 fc ff df 49 01 d5 4c 89 e9 48 c1 e9 03\n[  343.241883] RSP: 0018:ffff88800bcd7368 EFLAGS: 00010246\n[  343.242589] RAX: 00000000ba7c0a9c RBX: 0000000000000001 RCX:\n0000000000000000\n[  343.243542] RDX: 0000000000000000 RSI: ffff88800f8edb10 RDI:\nffff88800f8eda40\n[  343.244474] RBP: ffff88800bcd7458 R08: 0000000000000000 R09:\nffffffff94fb8445\n[  343.245403] R10: ffffffff94fb8336 R11: ffffffff94fb8445 R12:\n0000000000000000\n[  343.246355] R13: ffff88800a5a7000 R14: ffff88800a5b5800 R15:\n0000000000000020\n[  343.247291] FS:  00007fdde2bd7700(0000) GS:ffff888109780000(0000)\nknlGS:0000000000000000\n[  343.248350] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[  343.249120] CR2: 00000000200000c0 CR3: 000000000ef4c000 CR4:\n00000000000006e0\n[  343.250076] Call Trace:\n[  343.250423]  \u003cTASK\u003e\n[  343.250713]  ? memcpy+0x4d/0x60\n[  343.251162]  ? netem_init+0xa0/0xa0 [sch_netem]\n[  343.251795]  ? __sanitizer_cov_trace_pc+0x21/0x60\n[  343.252443]  netem_enqueue+0xe28/0x33c0 [sch_netem]\n[  343.253102]  ? stack_trace_save+0x87/0xb0\n[  343.253655]  ? filter_irq_stacks+0xb0/0xb0\n[  343.254220]  ? netem_init+0xa0/0xa0 [sch_netem]\n[  343.254837]  ? __kasan_check_write+0x14/0x20\n[  343.255418]  ? _raw_spin_lock+0x88/0xd6\n[  343.255953]  dev_qdisc_enqueue+0x50/0x180\n[  343.256508]  __dev_queue_xmit+0x1a7e/0x3090\n[  343.257083]  ? netdev_core_pick_tx+0x300/0x300\n[  343.257690]  ? check_kcov_mode+0x10/0x40\n[  343.258219]  ? _raw_spin_unlock_irqrestore+0x29/0x40\n[  343.258899]  ? __kasan_init_slab_obj+0x24/0x30\n[  343.259529]  ? setup_object.isra.71+0x23/0x90\n[  343.260121]  ? new_slab+0x26e/0x4b0\n[  343.260609]  ? kasan_poison+0x3a/0x50\n[  343.261118]  ? kasan_unpoison+0x28/0x50\n[  343.261637]  ? __kasan_slab_alloc+0x71/0x90\n[  343.262214]  ? memcpy+0x4d/0x60\n[  343.262674]  ? write_comp_data+0x2f/0x90\n[  343.263209]  ? __kasan_check_write+0x14/0x20\n[  343.263802]  ? __skb_clone+0x5d6/0x840\n[  343.264329]  ? __sanitizer_cov_trace_pc+0x21/0x60\n[  343.264958]  dev_queue_xmit+0x1c/0x20\n[  343.265470]  netlink_deliver_tap+0x652/0x9c0\n[  343.266067]  netlink_unicast+0x5a0/0x7f0\n[  343.266608]  ? netlink_attachskb+0x860/0x860\n[  343.267183]  ? __sanitizer_cov_trace_pc+0x21/0x60\n[  343.267820]  ? write_comp_data+0x2f/0x90\n[  343.268367]  netlink_sendmsg+0x922/0xe80\n[  343.268899]  ? netlink_unicast+0x7f0/0x7f0\n[  343.269472]  ? __sanitizer_cov_trace_pc+0x21/0x60\n[  343.270099]  ? write_comp_data+0x2f/0x90\n[  343.270644]  ? netlink_unicast+0x7f0/0x7f0\n[  343.271210]  sock_sendmsg+0x155/0x190\n[  343.271721]  ____sys_sendmsg+0x75f/0x8f0\n[  343.272262]  ? kernel_sendmsg+0x60/0x60\n[  343.272788]  ? write_comp_data+0x2f/0x90\n[  343.273332]  ? write_comp_data+0x2f/0x90\n[  343.273869]  ___sys_sendmsg+0x10f/0x190\n[  343.274405]  ? sendmsg_copy_msghdr+0x80/0x80\n[  343.274984]  ? slab_post_alloc_hook+0x70/0x230\n[  343.275597]  ? futex_wait_setup+0x240/0x240\n[  343.276175]  ? security_file_alloc+0x3e/0x170\n[  343.276779]  ? write_comp_d\n---truncated---"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-04T07:14:46.464Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/c54a60c8fbaa774f828e26df79f66229a8a0e010"
        },
        {
          "url": "https://git.kernel.org/stable/c/40cf2e058832d9cfaae98dfd77334926275598b6"
        },
        {
          "url": "https://git.kernel.org/stable/c/54e785f7d5c197bc06dbb8053700df7e2a093ced"
        },
        {
          "url": "https://git.kernel.org/stable/c/ff3f517bf7138e01a17369042908a3f345c0ee41"
        },
        {
          "url": "https://git.kernel.org/stable/c/c0315e93552e0d840e9edc6abd71c7db82ec8f51"
        },
        {
          "url": "https://git.kernel.org/stable/c/dadce61247c6230489527cc5e343b6002d1114c5"
        },
        {
          "url": "https://git.kernel.org/stable/c/4c986072a8c9249b9398c7a18f216dc26a9f0e35"
        },
        {
          "url": "https://git.kernel.org/stable/c/f123cffdd8fe8ea6c7fded4b88516a42798797d0"
        }
      ],
      "title": "net: netlink: af_netlink: Prevent empty skb by adding a check on len.",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2021-47606",
    "datePublished": "2024-06-19T14:54:05.025Z",
    "dateReserved": "2024-05-24T15:11:00.737Z",
    "dateUpdated": "2025-05-04T07:14:46.464Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"4.4.296\", \"matchCriteriaId\": \"1FF3BCF2-4788-45E7-BDAC-845DEBF8922F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"4.5\", \"versionEndExcluding\": \"4.9.294\", \"matchCriteriaId\": \"BEC14782-2EE3-4635-A927-91559E4F451C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"4.10\", \"versionEndExcluding\": \"4.14.259\", \"matchCriteriaId\": \"390D64FF-1DB7-4DD1-ADEF-CE96BEA2607C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"4.15\", \"versionEndExcluding\": \"4.19.222\", \"matchCriteriaId\": \"2D0D89BC-6CF8-4BFB-8C91-472348052528\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"4.20\", \"versionEndExcluding\": \"5.4.167\", \"matchCriteriaId\": \"942818CD-79A1-41C4-8695-4C9BA6D2A2DE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"5.5\", \"versionEndExcluding\": \"5.10.87\", \"matchCriteriaId\": \"CFD35461-7F6C-4537-840D-5ED5BAB2D315\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"5.11\", \"versionEndExcluding\": \"5.15.10\", \"matchCriteriaId\": \"D4F036E6-108C-4D1F-A4E0-234DC09AA0E2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:5.16:rc1:*:*:*:*:*:*\", \"matchCriteriaId\": \"357AA433-37E8-4323-BFB2-3038D6E4B414\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:5.16:rc2:*:*:*:*:*:*\", \"matchCriteriaId\": \"A73429BA-C2D9-4D0C-A75F-06A1CA8B3983\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:5.16:rc3:*:*:*:*:*:*\", \"matchCriteriaId\": \"F621B5E3-E99D-49E7-90B9-EC3B77C95383\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nnet: netlink: af_netlink: Prevent empty skb by adding a check on len.\\n\\nAdding a check on len parameter to avoid empty skb. This prevents a\\ndivision error in netem_enqueue function which is caused when skb-\u003elen=0\\nand skb-\u003edata_len=0 in the randomized corruption step as shown below.\\n\\nskb-\u003edata[prandom_u32() % skb_headlen(skb)] ^= 1\u003c\u003c(prandom_u32() % 8);\\n\\nCrash Report:\\n[  343.170349] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family\\n0 port 6081 - 0\\n[  343.216110] netem: version 1.3\\n[  343.235841] divide error: 0000 [#1] PREEMPT SMP KASAN NOPTI\\n[  343.236680] CPU: 3 PID: 4288 Comm: reproducer Not tainted 5.16.0-rc1+\\n[  343.237569] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996),\\nBIOS 1.11.0-2.el7 04/01/2014\\n[  343.238707] RIP: 0010:netem_enqueue+0x1590/0x33c0 [sch_netem]\\n[  343.239499] Code: 89 85 58 ff ff ff e8 5f 5d e9 d3 48 8b b5 48 ff ff\\nff 8b 8d 50 ff ff ff 8b 85 58 ff ff ff 48 8b bd 70 ff ff ff 31 d2 2b 4f\\n74 \u003cf7\u003e f1 48 b8 00 00 00 00 00 fc ff df 49 01 d5 4c 89 e9 48 c1 e9 03\\n[  343.241883] RSP: 0018:ffff88800bcd7368 EFLAGS: 00010246\\n[  343.242589] RAX: 00000000ba7c0a9c RBX: 0000000000000001 RCX:\\n0000000000000000\\n[  343.243542] RDX: 0000000000000000 RSI: ffff88800f8edb10 RDI:\\nffff88800f8eda40\\n[  343.244474] RBP: ffff88800bcd7458 R08: 0000000000000000 R09:\\nffffffff94fb8445\\n[  343.245403] R10: ffffffff94fb8336 R11: ffffffff94fb8445 R12:\\n0000000000000000\\n[  343.246355] R13: ffff88800a5a7000 R14: ffff88800a5b5800 R15:\\n0000000000000020\\n[  343.247291] FS:  00007fdde2bd7700(0000) GS:ffff888109780000(0000)\\nknlGS:0000000000000000\\n[  343.248350] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\\n[  343.249120] CR2: 00000000200000c0 CR3: 000000000ef4c000 CR4:\\n00000000000006e0\\n[  343.250076] Call Trace:\\n[  343.250423]  \u003cTASK\u003e\\n[  343.250713]  ? memcpy+0x4d/0x60\\n[  343.251162]  ? netem_init+0xa0/0xa0 [sch_netem]\\n[  343.251795]  ? __sanitizer_cov_trace_pc+0x21/0x60\\n[  343.252443]  netem_enqueue+0xe28/0x33c0 [sch_netem]\\n[  343.253102]  ? stack_trace_save+0x87/0xb0\\n[  343.253655]  ? filter_irq_stacks+0xb0/0xb0\\n[  343.254220]  ? netem_init+0xa0/0xa0 [sch_netem]\\n[  343.254837]  ? __kasan_check_write+0x14/0x20\\n[  343.255418]  ? _raw_spin_lock+0x88/0xd6\\n[  343.255953]  dev_qdisc_enqueue+0x50/0x180\\n[  343.256508]  __dev_queue_xmit+0x1a7e/0x3090\\n[  343.257083]  ? netdev_core_pick_tx+0x300/0x300\\n[  343.257690]  ? check_kcov_mode+0x10/0x40\\n[  343.258219]  ? _raw_spin_unlock_irqrestore+0x29/0x40\\n[  343.258899]  ? __kasan_init_slab_obj+0x24/0x30\\n[  343.259529]  ? setup_object.isra.71+0x23/0x90\\n[  343.260121]  ? new_slab+0x26e/0x4b0\\n[  343.260609]  ? kasan_poison+0x3a/0x50\\n[  343.261118]  ? kasan_unpoison+0x28/0x50\\n[  343.261637]  ? __kasan_slab_alloc+0x71/0x90\\n[  343.262214]  ? memcpy+0x4d/0x60\\n[  343.262674]  ? write_comp_data+0x2f/0x90\\n[  343.263209]  ? __kasan_check_write+0x14/0x20\\n[  343.263802]  ? __skb_clone+0x5d6/0x840\\n[  343.264329]  ? __sanitizer_cov_trace_pc+0x21/0x60\\n[  343.264958]  dev_queue_xmit+0x1c/0x20\\n[  343.265470]  netlink_deliver_tap+0x652/0x9c0\\n[  343.266067]  netlink_unicast+0x5a0/0x7f0\\n[  343.266608]  ? netlink_attachskb+0x860/0x860\\n[  343.267183]  ? __sanitizer_cov_trace_pc+0x21/0x60\\n[  343.267820]  ? write_comp_data+0x2f/0x90\\n[  343.268367]  netlink_sendmsg+0x922/0xe80\\n[  343.268899]  ? netlink_unicast+0x7f0/0x7f0\\n[  343.269472]  ? __sanitizer_cov_trace_pc+0x21/0x60\\n[  343.270099]  ? write_comp_data+0x2f/0x90\\n[  343.270644]  ? netlink_unicast+0x7f0/0x7f0\\n[  343.271210]  sock_sendmsg+0x155/0x190\\n[  343.271721]  ____sys_sendmsg+0x75f/0x8f0\\n[  343.272262]  ? kernel_sendmsg+0x60/0x60\\n[  343.272788]  ? write_comp_data+0x2f/0x90\\n[  343.273332]  ? write_comp_data+0x2f/0x90\\n[  343.273869]  ___sys_sendmsg+0x10f/0x190\\n[  343.274405]  ? sendmsg_copy_msghdr+0x80/0x80\\n[  343.274984]  ? slab_post_alloc_hook+0x70/0x230\\n[  343.275597]  ? futex_wait_setup+0x240/0x240\\n[  343.276175]  ? security_file_alloc+0x3e/0x170\\n[  343.276779]  ? write_comp_d\\n---truncated---\"}, {\"lang\": \"es\", \"value\": \"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: netlink: af_netlink: Evite el skb vac\\u00edo agregando una marca en len. Agregar una verificaci\\u00f3n en el par\\u00e1metro len para evitar skb vac\\u00edo. Esto evita un error de divisi\\u00f3n en la funci\\u00f3n netem_enqueue que se produce cuando skb-\u0026gt;len=0 y skb-\u0026gt;data_len=0 en el paso de corrupci\\u00f3n aleatoria como se muestra a continuaci\\u00f3n. skb-\u0026gt;datos[prandom_u32() % skb_headlen(skb)] ^= 1\u0026lt;\u0026lt;(prandom_u32() % 8); Informe de fallo: [343.170349] netdevsim netdevsim0 netdevsim3: establecer [1, 0] tipo 2 familia 0 puerto 6081 - 0 [343.216110] netem: versi\\u00f3n 1.3 [343.235841] error de divisi\\u00f3n: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 80] CPU : 3 PID: 4288 Comm: reproductor No contaminado 5.16.0-rc1+ [ 343.237569] Nombre del hardware: PC est\\u00e1ndar QEMU (i440FX + PIIX, 1996), BIOS 1.11.0-2.el7 01/04/2014 [ 343.238707] RIP: 0010:netem_enqueue+0x1590/0x33c0 [sch_netem] [ 343.239499] C\\u00f3digo: 89 85 58 ff ff ff e8 5f 5d e9 d3 48 8b b5 48 ff ff ff 8b 8d 50 ff ff 8b 85 58 ff ff 4 8 8b bd 70 y sigs. ff ff 31 d2 2b 4f 74  f1 48 b8 00 00 00 00 00 fc ff df 49 01 d5 4c 89 e9 48 c1 e9 03 [ 343.241883] RSP: 0018:ffff88800bcd7368 EFLAGS: 46 [343.242589] RAX: 00000000ba7c0a9c RBX: 0000000000000001 RCX: 0000000000000000 [ 343.243542] RDX: 0000000000000000 RSI: ffff88800f8edb10 RDI: ffff88800f8eda40 [ 343.244474] RBP: ff88800bcd7458 R08: 0000000000000000 R09: ffffffff94fb8445 [ 343.245403] R10: ffffffff94fb8336 R11: ffffffff94fb8445 R12: 0000000000000000 [ 343. 246355] R13: ffff88800a5a7000 R14: ffff88800a5b5800 R15 : 0000000000000020 [ 343.247291] FS: 00007fdde2bd7700(0000) GS:ffff888109780000(0000) knlGS:0000000000000000 [ 343.248350] CS: 0010 DS: 000 ES: 0000 CR0: 0000000080050033 [ 343.249120] CR2: 00000000200000c0 CR3: 000000000ef4c000 CR4: 00000000000006e0 [ 343.250076] Seguimiento de llamadas: [ 343.250423]  [ 343.250713] ? memcpy+0x4d/0x60 [343.251162]? netem_init+0xa0/0xa0 [sch_netem] [ 343.251795] ? __sanitizer_cov_trace_pc+0x21/0x60 [ 343.252443] netem_enqueue+0xe28/0x33c0 [sch_netem] [ 343.253102] ? stack_trace_save+0x87/0xb0 [343.253655]? filter_irq_stacks+0xb0/0xb0 [343.254220]? netem_init+0xa0/0xa0 [sch_netem] [ 343.254837] ? __kasan_check_write+0x14/0x20 [343.255418]? _raw_spin_lock+0x88/0xd6 [ 343.255953] dev_qdisc_enqueue+0x50/0x180 [ 343.256508] __dev_queue_xmit+0x1a7e/0x3090 [ 343.257083] ? netdev_core_pick_tx+0x300/0x300 [343.257690]? check_kcov_mode+0x10/0x40 [343.258219]? _raw_spin_unlock_irqrestore+0x29/0x40 [343.258899]? __kasan_init_slab_obj+0x24/0x30 [343.259529] ? setup_object.isra.71+0x23/0x90 [343.260121]? nueva_losa+0x26e/0x4b0 [ 343.260609] ? kasan_poison+0x3a/0x50 [ 343.261118] ? kasan_unpoison+0x28/0x50 [343.261637]? __kasan_slab_alloc+0x71/0x90 [343.262214]? memcpy+0x4d/0x60 [343.262674]? write_comp_data+0x2f/0x90 [343.263209]? __kasan_check_write+0x14/0x20 [343.263802]? __skb_clone+0x5d6/0x840 [343.264329]? __sanitizer_cov_trace_pc+0x21/0x60 [ 343.264958] dev_queue_xmit+0x1c/0x20 [ 343.265470] netlink_deliver_tap+0x652/0x9c0 [ 343.266067] netlink_unicast+0x5a0/0x7f0 [ 343. 266608] ? netlink_attachskb+0x860/0x860 [343.267183]? __sanitizer_cov_trace_pc+0x21/0x60 [ 343.267820] ? write_comp_data+0x2f/0x90 [343.268367] netlink_sendmsg+0x922/0xe80 [343.268899]? netlink_unicast+0x7f0/0x7f0 [343.269472]? __sanitizer_cov_trace_pc+0x21/0x60 [343.270099] ? write_comp_data+0x2f/0x90 [343.270644]? netlink_unicast+0x7f0/0x7f0 [343.271210] sock_sendmsg+0x155/0x190 [343.271721] ____sys_sendmsg+0x75f/0x8f0 [343.272262] ? kernel_sendmsg+0x60/0x60 [343.272788]? write_comp_data+0x2f/0x90 [343.273332]? write_comp_data+0x2f/0x90 [ 343.273869] ___sys_sendmsg+0x10f/0x190 [ 343.274405] ? sendmsg_copy_msghdr+0x80/0x80 [343.274984]? slab_post_alloc_hook+0x70/0x230 [343.275597]? futex_wait_setup+0x240/0x240 [343.276175]? security_file_alloc+0x3e/0x170 [343.276779]? write_comp_d ---truncado---\"}]",
      "id": "CVE-2021-47606",
      "lastModified": "2024-11-21T06:36:39.273",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\", \"baseScore\": 5.5, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"LOCAL\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 1.8, \"impactScore\": 3.6}]}",
      "published": "2024-06-19T15:15:55.153",
      "references": "[{\"url\": \"https://git.kernel.org/stable/c/40cf2e058832d9cfaae98dfd77334926275598b6\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/4c986072a8c9249b9398c7a18f216dc26a9f0e35\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/54e785f7d5c197bc06dbb8053700df7e2a093ced\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/c0315e93552e0d840e9edc6abd71c7db82ec8f51\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/c54a60c8fbaa774f828e26df79f66229a8a0e010\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/dadce61247c6230489527cc5e343b6002d1114c5\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/f123cffdd8fe8ea6c7fded4b88516a42798797d0\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/ff3f517bf7138e01a17369042908a3f345c0ee41\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/40cf2e058832d9cfaae98dfd77334926275598b6\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/4c986072a8c9249b9398c7a18f216dc26a9f0e35\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/54e785f7d5c197bc06dbb8053700df7e2a093ced\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/c0315e93552e0d840e9edc6abd71c7db82ec8f51\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/c54a60c8fbaa774f828e26df79f66229a8a0e010\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/dadce61247c6230489527cc5e343b6002d1114c5\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/f123cffdd8fe8ea6c7fded4b88516a42798797d0\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/ff3f517bf7138e01a17369042908a3f345c0ee41\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}]",
      "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-369\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2021-47606\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-06-19T15:15:55.153\",\"lastModified\":\"2024-11-21T06:36:39.273\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nnet: netlink: af_netlink: Prevent empty skb by adding a check on len.\\n\\nAdding a check on len parameter to avoid empty skb. This prevents a\\ndivision error in netem_enqueue function which is caused when skb-\u003elen=0\\nand skb-\u003edata_len=0 in the randomized corruption step as shown below.\\n\\nskb-\u003edata[prandom_u32() % skb_headlen(skb)] ^= 1\u003c\u003c(prandom_u32() % 8);\\n\\nCrash Report:\\n[  343.170349] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family\\n0 port 6081 - 0\\n[  343.216110] netem: version 1.3\\n[  343.235841] divide error: 0000 [#1] PREEMPT SMP KASAN NOPTI\\n[  343.236680] CPU: 3 PID: 4288 Comm: reproducer Not tainted 5.16.0-rc1+\\n[  343.237569] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996),\\nBIOS 1.11.0-2.el7 04/01/2014\\n[  343.238707] RIP: 0010:netem_enqueue+0x1590/0x33c0 [sch_netem]\\n[  343.239499] Code: 89 85 58 ff ff ff e8 5f 5d e9 d3 48 8b b5 48 ff ff\\nff 8b 8d 50 ff ff ff 8b 85 58 ff ff ff 48 8b bd 70 ff ff ff 31 d2 2b 4f\\n74 \u003cf7\u003e f1 48 b8 00 00 00 00 00 fc ff df 49 01 d5 4c 89 e9 48 c1 e9 03\\n[  343.241883] RSP: 0018:ffff88800bcd7368 EFLAGS: 00010246\\n[  343.242589] RAX: 00000000ba7c0a9c RBX: 0000000000000001 RCX:\\n0000000000000000\\n[  343.243542] RDX: 0000000000000000 RSI: ffff88800f8edb10 RDI:\\nffff88800f8eda40\\n[  343.244474] RBP: ffff88800bcd7458 R08: 0000000000000000 R09:\\nffffffff94fb8445\\n[  343.245403] R10: ffffffff94fb8336 R11: ffffffff94fb8445 R12:\\n0000000000000000\\n[  343.246355] R13: ffff88800a5a7000 R14: ffff88800a5b5800 R15:\\n0000000000000020\\n[  343.247291] FS:  00007fdde2bd7700(0000) GS:ffff888109780000(0000)\\nknlGS:0000000000000000\\n[  343.248350] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\\n[  343.249120] CR2: 00000000200000c0 CR3: 000000000ef4c000 CR4:\\n00000000000006e0\\n[  343.250076] Call Trace:\\n[  343.250423]  \u003cTASK\u003e\\n[  343.250713]  ? memcpy+0x4d/0x60\\n[  343.251162]  ? netem_init+0xa0/0xa0 [sch_netem]\\n[  343.251795]  ? __sanitizer_cov_trace_pc+0x21/0x60\\n[  343.252443]  netem_enqueue+0xe28/0x33c0 [sch_netem]\\n[  343.253102]  ? stack_trace_save+0x87/0xb0\\n[  343.253655]  ? filter_irq_stacks+0xb0/0xb0\\n[  343.254220]  ? netem_init+0xa0/0xa0 [sch_netem]\\n[  343.254837]  ? __kasan_check_write+0x14/0x20\\n[  343.255418]  ? _raw_spin_lock+0x88/0xd6\\n[  343.255953]  dev_qdisc_enqueue+0x50/0x180\\n[  343.256508]  __dev_queue_xmit+0x1a7e/0x3090\\n[  343.257083]  ? netdev_core_pick_tx+0x300/0x300\\n[  343.257690]  ? check_kcov_mode+0x10/0x40\\n[  343.258219]  ? _raw_spin_unlock_irqrestore+0x29/0x40\\n[  343.258899]  ? __kasan_init_slab_obj+0x24/0x30\\n[  343.259529]  ? setup_object.isra.71+0x23/0x90\\n[  343.260121]  ? new_slab+0x26e/0x4b0\\n[  343.260609]  ? kasan_poison+0x3a/0x50\\n[  343.261118]  ? kasan_unpoison+0x28/0x50\\n[  343.261637]  ? __kasan_slab_alloc+0x71/0x90\\n[  343.262214]  ? memcpy+0x4d/0x60\\n[  343.262674]  ? write_comp_data+0x2f/0x90\\n[  343.263209]  ? __kasan_check_write+0x14/0x20\\n[  343.263802]  ? __skb_clone+0x5d6/0x840\\n[  343.264329]  ? __sanitizer_cov_trace_pc+0x21/0x60\\n[  343.264958]  dev_queue_xmit+0x1c/0x20\\n[  343.265470]  netlink_deliver_tap+0x652/0x9c0\\n[  343.266067]  netlink_unicast+0x5a0/0x7f0\\n[  343.266608]  ? netlink_attachskb+0x860/0x860\\n[  343.267183]  ? __sanitizer_cov_trace_pc+0x21/0x60\\n[  343.267820]  ? write_comp_data+0x2f/0x90\\n[  343.268367]  netlink_sendmsg+0x922/0xe80\\n[  343.268899]  ? netlink_unicast+0x7f0/0x7f0\\n[  343.269472]  ? __sanitizer_cov_trace_pc+0x21/0x60\\n[  343.270099]  ? write_comp_data+0x2f/0x90\\n[  343.270644]  ? netlink_unicast+0x7f0/0x7f0\\n[  343.271210]  sock_sendmsg+0x155/0x190\\n[  343.271721]  ____sys_sendmsg+0x75f/0x8f0\\n[  343.272262]  ? kernel_sendmsg+0x60/0x60\\n[  343.272788]  ? write_comp_data+0x2f/0x90\\n[  343.273332]  ? write_comp_data+0x2f/0x90\\n[  343.273869]  ___sys_sendmsg+0x10f/0x190\\n[  343.274405]  ? sendmsg_copy_msghdr+0x80/0x80\\n[  343.274984]  ? slab_post_alloc_hook+0x70/0x230\\n[  343.275597]  ? futex_wait_setup+0x240/0x240\\n[  343.276175]  ? security_file_alloc+0x3e/0x170\\n[  343.276779]  ? write_comp_d\\n---truncated---\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: netlink: af_netlink: Evite el skb vac\u00edo agregando una marca en len. Agregar una verificaci\u00f3n en el par\u00e1metro len para evitar skb vac\u00edo. Esto evita un error de divisi\u00f3n en la funci\u00f3n netem_enqueue que se produce cuando skb-\u0026gt;len=0 y skb-\u0026gt;data_len=0 en el paso de corrupci\u00f3n aleatoria como se muestra a continuaci\u00f3n. skb-\u0026gt;datos[prandom_u32() % skb_headlen(skb)] ^= 1\u0026lt;\u0026lt;(prandom_u32() % 8); Informe de fallo: [343.170349] netdevsim netdevsim0 netdevsim3: establecer [1, 0] tipo 2 familia 0 puerto 6081 - 0 [343.216110] netem: versi\u00f3n 1.3 [343.235841] error de divisi\u00f3n: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 80] CPU : 3 PID: 4288 Comm: reproductor No contaminado 5.16.0-rc1+ [ 343.237569] Nombre del hardware: PC est\u00e1ndar QEMU (i440FX + PIIX, 1996), BIOS 1.11.0-2.el7 01/04/2014 [ 343.238707] RIP: 0010:netem_enqueue+0x1590/0x33c0 [sch_netem] [ 343.239499] C\u00f3digo: 89 85 58 ff ff ff e8 5f 5d e9 d3 48 8b b5 48 ff ff ff 8b 8d 50 ff ff 8b 85 58 ff ff 4 8 8b bd 70 y sigs. ff ff 31 d2 2b 4f 74  f1 48 b8 00 00 00 00 00 fc ff df 49 01 d5 4c 89 e9 48 c1 e9 03 [ 343.241883] RSP: 0018:ffff88800bcd7368 EFLAGS: 46 [343.242589] RAX: 00000000ba7c0a9c RBX: 0000000000000001 RCX: 0000000000000000 [ 343.243542] RDX: 0000000000000000 RSI: ffff88800f8edb10 RDI: ffff88800f8eda40 [ 343.244474] RBP: ff88800bcd7458 R08: 0000000000000000 R09: ffffffff94fb8445 [ 343.245403] R10: ffffffff94fb8336 R11: ffffffff94fb8445 R12: 0000000000000000 [ 343. 246355] R13: ffff88800a5a7000 R14: ffff88800a5b5800 R15 : 0000000000000020 [ 343.247291] FS: 00007fdde2bd7700(0000) GS:ffff888109780000(0000) knlGS:0000000000000000 [ 343.248350] CS: 0010 DS: 000 ES: 0000 CR0: 0000000080050033 [ 343.249120] CR2: 00000000200000c0 CR3: 000000000ef4c000 CR4: 00000000000006e0 [ 343.250076] Seguimiento de llamadas: [ 343.250423]  [ 343.250713] ? memcpy+0x4d/0x60 [343.251162]? netem_init+0xa0/0xa0 [sch_netem] [ 343.251795] ? __sanitizer_cov_trace_pc+0x21/0x60 [ 343.252443] netem_enqueue+0xe28/0x33c0 [sch_netem] [ 343.253102] ? stack_trace_save+0x87/0xb0 [343.253655]? filter_irq_stacks+0xb0/0xb0 [343.254220]? netem_init+0xa0/0xa0 [sch_netem] [ 343.254837] ? __kasan_check_write+0x14/0x20 [343.255418]? _raw_spin_lock+0x88/0xd6 [ 343.255953] dev_qdisc_enqueue+0x50/0x180 [ 343.256508] __dev_queue_xmit+0x1a7e/0x3090 [ 343.257083] ? netdev_core_pick_tx+0x300/0x300 [343.257690]? check_kcov_mode+0x10/0x40 [343.258219]? _raw_spin_unlock_irqrestore+0x29/0x40 [343.258899]? __kasan_init_slab_obj+0x24/0x30 [343.259529] ? setup_object.isra.71+0x23/0x90 [343.260121]? nueva_losa+0x26e/0x4b0 [ 343.260609] ? kasan_poison+0x3a/0x50 [ 343.261118] ? kasan_unpoison+0x28/0x50 [343.261637]? __kasan_slab_alloc+0x71/0x90 [343.262214]? memcpy+0x4d/0x60 [343.262674]? write_comp_data+0x2f/0x90 [343.263209]? __kasan_check_write+0x14/0x20 [343.263802]? __skb_clone+0x5d6/0x840 [343.264329]? __sanitizer_cov_trace_pc+0x21/0x60 [ 343.264958] dev_queue_xmit+0x1c/0x20 [ 343.265470] netlink_deliver_tap+0x652/0x9c0 [ 343.266067] netlink_unicast+0x5a0/0x7f0 [ 343. 266608] ? netlink_attachskb+0x860/0x860 [343.267183]? __sanitizer_cov_trace_pc+0x21/0x60 [ 343.267820] ? write_comp_data+0x2f/0x90 [343.268367] netlink_sendmsg+0x922/0xe80 [343.268899]? netlink_unicast+0x7f0/0x7f0 [343.269472]? __sanitizer_cov_trace_pc+0x21/0x60 [343.270099] ? write_comp_data+0x2f/0x90 [343.270644]? netlink_unicast+0x7f0/0x7f0 [343.271210] sock_sendmsg+0x155/0x190 [343.271721] ____sys_sendmsg+0x75f/0x8f0 [343.272262] ? kernel_sendmsg+0x60/0x60 [343.272788]? write_comp_data+0x2f/0x90 [343.273332]? write_comp_data+0x2f/0x90 [ 343.273869] ___sys_sendmsg+0x10f/0x190 [ 343.274405] ? sendmsg_copy_msghdr+0x80/0x80 [343.274984]? slab_post_alloc_hook+0x70/0x230 [343.275597]? futex_wait_setup+0x240/0x240 [343.276175]? security_file_alloc+0x3e/0x170 [343.276779]? write_comp_d ---truncado---\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-369\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"4.4.296\",\"matchCriteriaId\":\"1FF3BCF2-4788-45E7-BDAC-845DEBF8922F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.5\",\"versionEndExcluding\":\"4.9.294\",\"matchCriteriaId\":\"BEC14782-2EE3-4635-A927-91559E4F451C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.10\",\"versionEndExcluding\":\"4.14.259\",\"matchCriteriaId\":\"390D64FF-1DB7-4DD1-ADEF-CE96BEA2607C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.15\",\"versionEndExcluding\":\"4.19.222\",\"matchCriteriaId\":\"2D0D89BC-6CF8-4BFB-8C91-472348052528\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.20\",\"versionEndExcluding\":\"5.4.167\",\"matchCriteriaId\":\"942818CD-79A1-41C4-8695-4C9BA6D2A2DE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.5\",\"versionEndExcluding\":\"5.10.87\",\"matchCriteriaId\":\"CFD35461-7F6C-4537-840D-5ED5BAB2D315\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.10\",\"matchCriteriaId\":\"D4F036E6-108C-4D1F-A4E0-234DC09AA0E2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:5.16:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"357AA433-37E8-4323-BFB2-3038D6E4B414\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:5.16:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"A73429BA-C2D9-4D0C-A75F-06A1CA8B3983\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:5.16:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"F621B5E3-E99D-49E7-90B9-EC3B77C95383\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/40cf2e058832d9cfaae98dfd77334926275598b6\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/4c986072a8c9249b9398c7a18f216dc26a9f0e35\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/54e785f7d5c197bc06dbb8053700df7e2a093ced\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/c0315e93552e0d840e9edc6abd71c7db82ec8f51\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/c54a60c8fbaa774f828e26df79f66229a8a0e010\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/dadce61247c6230489527cc5e343b6002d1114c5\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/f123cffdd8fe8ea6c7fded4b88516a42798797d0\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/ff3f517bf7138e01a17369042908a3f345c0ee41\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/40cf2e058832d9cfaae98dfd77334926275598b6\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/4c986072a8c9249b9398c7a18f216dc26a9f0e35\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/54e785f7d5c197bc06dbb8053700df7e2a093ced\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/c0315e93552e0d840e9edc6abd71c7db82ec8f51\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/c54a60c8fbaa774f828e26df79f66229a8a0e010\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/dadce61247c6230489527cc5e343b6002d1114c5\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/f123cffdd8fe8ea6c7fded4b88516a42798797d0\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/ff3f517bf7138e01a17369042908a3f345c0ee41\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://git.kernel.org/stable/c/c54a60c8fbaa774f828e26df79f66229a8a0e010\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/40cf2e058832d9cfaae98dfd77334926275598b6\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/54e785f7d5c197bc06dbb8053700df7e2a093ced\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/ff3f517bf7138e01a17369042908a3f345c0ee41\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/c0315e93552e0d840e9edc6abd71c7db82ec8f51\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/dadce61247c6230489527cc5e343b6002d1114c5\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/4c986072a8c9249b9398c7a18f216dc26a9f0e35\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/f123cffdd8fe8ea6c7fded4b88516a42798797d0\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-04T05:47:40.217Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2021-47606\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-09-10T17:12:08.038077Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-09-11T12:42:26.353Z\"}}], \"cna\": {\"title\": \"net: netlink: af_netlink: Prevent empty skb by adding a check on len.\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2\", \"lessThan\": \"c54a60c8fbaa774f828e26df79f66229a8a0e010\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2\", \"lessThan\": \"40cf2e058832d9cfaae98dfd77334926275598b6\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2\", \"lessThan\": \"54e785f7d5c197bc06dbb8053700df7e2a093ced\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2\", \"lessThan\": \"ff3f517bf7138e01a17369042908a3f345c0ee41\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2\", \"lessThan\": \"c0315e93552e0d840e9edc6abd71c7db82ec8f51\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2\", \"lessThan\": \"dadce61247c6230489527cc5e343b6002d1114c5\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2\", \"lessThan\": \"4c986072a8c9249b9398c7a18f216dc26a9f0e35\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2\", \"lessThan\": \"f123cffdd8fe8ea6c7fded4b88516a42798797d0\", \"versionType\": \"git\"}], \"programFiles\": [\"net/netlink/af_netlink.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"4.4.296\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.4.*\"}, {\"status\": \"unaffected\", \"version\": \"4.9.294\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.9.*\"}, {\"status\": \"unaffected\", \"version\": \"4.14.259\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.14.*\"}, {\"status\": \"unaffected\", \"version\": \"4.19.222\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.19.*\"}, {\"status\": \"unaffected\", \"version\": \"5.4.167\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.4.*\"}, {\"status\": \"unaffected\", \"version\": \"5.10.87\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.10.*\"}, {\"status\": \"unaffected\", \"version\": \"5.15.10\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.15.*\"}, {\"status\": \"unaffected\", \"version\": \"5.16\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"net/netlink/af_netlink.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/c54a60c8fbaa774f828e26df79f66229a8a0e010\"}, {\"url\": \"https://git.kernel.org/stable/c/40cf2e058832d9cfaae98dfd77334926275598b6\"}, {\"url\": \"https://git.kernel.org/stable/c/54e785f7d5c197bc06dbb8053700df7e2a093ced\"}, {\"url\": \"https://git.kernel.org/stable/c/ff3f517bf7138e01a17369042908a3f345c0ee41\"}, {\"url\": \"https://git.kernel.org/stable/c/c0315e93552e0d840e9edc6abd71c7db82ec8f51\"}, {\"url\": \"https://git.kernel.org/stable/c/dadce61247c6230489527cc5e343b6002d1114c5\"}, {\"url\": \"https://git.kernel.org/stable/c/4c986072a8c9249b9398c7a18f216dc26a9f0e35\"}, {\"url\": \"https://git.kernel.org/stable/c/f123cffdd8fe8ea6c7fded4b88516a42798797d0\"}], \"x_generator\": {\"engine\": \"bippy-5f407fcff5a0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nnet: netlink: af_netlink: Prevent empty skb by adding a check on len.\\n\\nAdding a check on len parameter to avoid empty skb. This prevents a\\ndivision error in netem_enqueue function which is caused when skb-\u003elen=0\\nand skb-\u003edata_len=0 in the randomized corruption step as shown below.\\n\\nskb-\u003edata[prandom_u32() % skb_headlen(skb)] ^= 1\u003c\u003c(prandom_u32() % 8);\\n\\nCrash Report:\\n[  343.170349] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family\\n0 port 6081 - 0\\n[  343.216110] netem: version 1.3\\n[  343.235841] divide error: 0000 [#1] PREEMPT SMP KASAN NOPTI\\n[  343.236680] CPU: 3 PID: 4288 Comm: reproducer Not tainted 5.16.0-rc1+\\n[  343.237569] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996),\\nBIOS 1.11.0-2.el7 04/01/2014\\n[  343.238707] RIP: 0010:netem_enqueue+0x1590/0x33c0 [sch_netem]\\n[  343.239499] Code: 89 85 58 ff ff ff e8 5f 5d e9 d3 48 8b b5 48 ff ff\\nff 8b 8d 50 ff ff ff 8b 85 58 ff ff ff 48 8b bd 70 ff ff ff 31 d2 2b 4f\\n74 \u003cf7\u003e f1 48 b8 00 00 00 00 00 fc ff df 49 01 d5 4c 89 e9 48 c1 e9 03\\n[  343.241883] RSP: 0018:ffff88800bcd7368 EFLAGS: 00010246\\n[  343.242589] RAX: 00000000ba7c0a9c RBX: 0000000000000001 RCX:\\n0000000000000000\\n[  343.243542] RDX: 0000000000000000 RSI: ffff88800f8edb10 RDI:\\nffff88800f8eda40\\n[  343.244474] RBP: ffff88800bcd7458 R08: 0000000000000000 R09:\\nffffffff94fb8445\\n[  343.245403] R10: ffffffff94fb8336 R11: ffffffff94fb8445 R12:\\n0000000000000000\\n[  343.246355] R13: ffff88800a5a7000 R14: ffff88800a5b5800 R15:\\n0000000000000020\\n[  343.247291] FS:  00007fdde2bd7700(0000) GS:ffff888109780000(0000)\\nknlGS:0000000000000000\\n[  343.248350] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\\n[  343.249120] CR2: 00000000200000c0 CR3: 000000000ef4c000 CR4:\\n00000000000006e0\\n[  343.250076] Call Trace:\\n[  343.250423]  \u003cTASK\u003e\\n[  343.250713]  ? memcpy+0x4d/0x60\\n[  343.251162]  ? netem_init+0xa0/0xa0 [sch_netem]\\n[  343.251795]  ? __sanitizer_cov_trace_pc+0x21/0x60\\n[  343.252443]  netem_enqueue+0xe28/0x33c0 [sch_netem]\\n[  343.253102]  ? stack_trace_save+0x87/0xb0\\n[  343.253655]  ? filter_irq_stacks+0xb0/0xb0\\n[  343.254220]  ? netem_init+0xa0/0xa0 [sch_netem]\\n[  343.254837]  ? __kasan_check_write+0x14/0x20\\n[  343.255418]  ? _raw_spin_lock+0x88/0xd6\\n[  343.255953]  dev_qdisc_enqueue+0x50/0x180\\n[  343.256508]  __dev_queue_xmit+0x1a7e/0x3090\\n[  343.257083]  ? netdev_core_pick_tx+0x300/0x300\\n[  343.257690]  ? check_kcov_mode+0x10/0x40\\n[  343.258219]  ? _raw_spin_unlock_irqrestore+0x29/0x40\\n[  343.258899]  ? __kasan_init_slab_obj+0x24/0x30\\n[  343.259529]  ? setup_object.isra.71+0x23/0x90\\n[  343.260121]  ? new_slab+0x26e/0x4b0\\n[  343.260609]  ? kasan_poison+0x3a/0x50\\n[  343.261118]  ? kasan_unpoison+0x28/0x50\\n[  343.261637]  ? __kasan_slab_alloc+0x71/0x90\\n[  343.262214]  ? memcpy+0x4d/0x60\\n[  343.262674]  ? write_comp_data+0x2f/0x90\\n[  343.263209]  ? __kasan_check_write+0x14/0x20\\n[  343.263802]  ? __skb_clone+0x5d6/0x840\\n[  343.264329]  ? __sanitizer_cov_trace_pc+0x21/0x60\\n[  343.264958]  dev_queue_xmit+0x1c/0x20\\n[  343.265470]  netlink_deliver_tap+0x652/0x9c0\\n[  343.266067]  netlink_unicast+0x5a0/0x7f0\\n[  343.266608]  ? netlink_attachskb+0x860/0x860\\n[  343.267183]  ? __sanitizer_cov_trace_pc+0x21/0x60\\n[  343.267820]  ? write_comp_data+0x2f/0x90\\n[  343.268367]  netlink_sendmsg+0x922/0xe80\\n[  343.268899]  ? netlink_unicast+0x7f0/0x7f0\\n[  343.269472]  ? __sanitizer_cov_trace_pc+0x21/0x60\\n[  343.270099]  ? write_comp_data+0x2f/0x90\\n[  343.270644]  ? netlink_unicast+0x7f0/0x7f0\\n[  343.271210]  sock_sendmsg+0x155/0x190\\n[  343.271721]  ____sys_sendmsg+0x75f/0x8f0\\n[  343.272262]  ? kernel_sendmsg+0x60/0x60\\n[  343.272788]  ? write_comp_data+0x2f/0x90\\n[  343.273332]  ? write_comp_data+0x2f/0x90\\n[  343.273869]  ___sys_sendmsg+0x10f/0x190\\n[  343.274405]  ? sendmsg_copy_msghdr+0x80/0x80\\n[  343.274984]  ? slab_post_alloc_hook+0x70/0x230\\n[  343.275597]  ? futex_wait_setup+0x240/0x240\\n[  343.276175]  ? security_file_alloc+0x3e/0x170\\n[  343.276779]  ? write_comp_d\\n---truncated---\"}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2024-12-19T07:45:40.019Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2021-47606\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2024-12-19T07:45:40.019Z\", \"dateReserved\": \"2024-05-24T15:11:00.737Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-06-19T14:54:05.025Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}