Ubuntu: (CVE-2021-47223): linux vulnerability
Description
In the Linux kernel, the following vulnerability has been resolved: net: bridge: fix vlan tunnel dst null pointer dereference This patch fixes a tunnel_dst null pointer dereference due to lockless access in the tunnel egress path. When deleting a vlan tunnel the tunnel_dst pointer is set to NULL without waiting a grace period (i.e. while it's still usable) and packets egressing are dereferencing it without checking. Use READ/WRITE_ONCE to annotate the lockless use of tunnel_id, use RCU for accessing tunnel_dst and make sure it is read only once and checked in the egress path. The dst is already properly RCU protected so we don't need to do anything fancy than to make sure tunnel_id and tunnel_dst are read only once and checked in the egress path.
Solution(s)
- ubuntu-upgrade-linux
- ubuntu-upgrade-linux-aws
- ubuntu-upgrade-linux-aws-5-4
- ubuntu-upgrade-linux-aws-hwe
- ubuntu-upgrade-linux-azure
- ubuntu-upgrade-linux-azure-4-15
- ubuntu-upgrade-linux-azure-5-4
- ubuntu-upgrade-linux-bluefield
- ubuntu-upgrade-linux-gcp
- ubuntu-upgrade-linux-gcp-4-15
- ubuntu-upgrade-linux-gcp-5-4
- ubuntu-upgrade-linux-gkeop
- ubuntu-upgrade-linux-hwe
- ubuntu-upgrade-linux-hwe-5-4
- ubuntu-upgrade-linux-kvm
- ubuntu-upgrade-linux-oracle
- ubuntu-upgrade-linux-oracle-5-4
- ubuntu-upgrade-linux-raspi
- ubuntu-upgrade-linux-raspi-5-4
- Lightweight Endpoint Agent
- Live Dashboards
- Real Risk Prioritization
- IT-Integrated Remediation Projects
- Cloud, Virtual, and Container Assessment
- Integrated Threat Feeds
- Easy-to-Use RESTful API
- Automation-Assisted Patching
- Automated Containment
With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.
– Scott Cheney, Manager of Information Security, Sierra View Medical Center