GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2021-47397 (GCVE-0-2021-47397)

Vulnerability from cvelistv5 – Published: 2024-05-21 15:03 – Updated: 2026-08-05 08:47
VLAI
Title
sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb
Summary
In the Linux kernel, the following vulnerability has been resolved: sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb We should always check if skb_header_pointer's return is NULL before using it, otherwise it may cause null-ptr-deref, as syzbot reported: KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] RIP: 0010:sctp_rcv_ootb net/sctp/input.c:705 [inline] RIP: 0010:sctp_rcv+0x1d84/0x3220 net/sctp/input.c:196 Call Trace: <IRQ> sctp6_rcv+0x38/0x60 net/sctp/ipv6.c:1109 ip6_protocol_deliver_rcu+0x2e9/0x1ca0 net/ipv6/ip6_input.c:422 ip6_input_finish+0x62/0x170 net/ipv6/ip6_input.c:463 NF_HOOK include/linux/netfilter.h:307 [inline] NF_HOOK include/linux/netfilter.h:301 [inline] ip6_input+0x9c/0xd0 net/ipv6/ip6_input.c:472 dst_input include/net/dst.h:460 [inline] ip6_rcv_finish net/ipv6/ip6_input.c:76 [inline] NF_HOOK include/linux/netfilter.h:307 [inline] NF_HOOK include/linux/netfilter.h:301 [inline] ipv6_rcv+0x28c/0x3c0 net/ipv6/ip6_input.c:297
Severity
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-09-10 15:38 UTC
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 3acb50c18d8d6650f10919464ade4dcdaf41d62f , < 77bc7dcf0fcc1519341a91788d7a2914fcfddf6d (git)
Affected: 3acb50c18d8d6650f10919464ade4dcdaf41d62f , < 8c630a7b4f9dec63f08bd881ab77984a724a5124 (git)
Affected: 3acb50c18d8d6650f10919464ade4dcdaf41d62f , < ec018021cf445abbe8e2f3e2a7f1dcc813cb8ea1 (git)
Affected: 3acb50c18d8d6650f10919464ade4dcdaf41d62f , < 9c6591ae8e63f93c895ad5e2703c36c548aac997 (git)
Affected: 3acb50c18d8d6650f10919464ade4dcdaf41d62f , < 8180611c238e11676612eb2a9828b1c7a3a4d77b (git)
Affected: 3acb50c18d8d6650f10919464ade4dcdaf41d62f , < f7e745f8e94492a8ac0b0a26e25f2b19d342918f (git)
guessed Create a notification for this product.
Linux Linux Affected: 4.8
Unaffected: 0 , < 4.8 (semver)
Unaffected: 4.14.249 , ≤ 4.14.* (semver)
Unaffected: 4.19.209 , ≤ 4.19.* (semver)
Unaffected: 5.4.151 , ≤ 5.4.* (semver)
Unaffected: 5.10.71 , ≤ 5.10.* (semver)
Unaffected: 5.14.10 , ≤ 5.14.* (semver)
Unaffected: 5.15 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T05:39:59.634Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/77bc7dcf0fcc1519341a91788d7a2914fcfddf6d"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/8c630a7b4f9dec63f08bd881ab77984a724a5124"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/ec018021cf445abbe8e2f3e2a7f1dcc813cb8ea1"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/9c6591ae8e63f93c895ad5e2703c36c548aac997"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/8180611c238e11676612eb2a9828b1c7a3a4d77b"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/f7e745f8e94492a8ac0b0a26e25f2b19d342918f"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2021-47397",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-10T15:38:10.305778Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-11T17:33:42.263Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/sctp/input.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "77bc7dcf0fcc1519341a91788d7a2914fcfddf6d",
              "status": "affected",
              "version": "3acb50c18d8d6650f10919464ade4dcdaf41d62f",
              "versionType": "git"
            },
            {
              "lessThan": "8c630a7b4f9dec63f08bd881ab77984a724a5124",
              "status": "affected",
              "version": "3acb50c18d8d6650f10919464ade4dcdaf41d62f",
              "versionType": "git"
            },
            {
              "lessThan": "ec018021cf445abbe8e2f3e2a7f1dcc813cb8ea1",
              "status": "affected",
              "version": "3acb50c18d8d6650f10919464ade4dcdaf41d62f",
              "versionType": "git"
            },
            {
              "lessThan": "9c6591ae8e63f93c895ad5e2703c36c548aac997",
              "status": "affected",
              "version": "3acb50c18d8d6650f10919464ade4dcdaf41d62f",
              "versionType": "git"
            },
            {
              "lessThan": "8180611c238e11676612eb2a9828b1c7a3a4d77b",
              "status": "affected",
              "version": "3acb50c18d8d6650f10919464ade4dcdaf41d62f",
              "versionType": "git"
            },
            {
              "lessThan": "f7e745f8e94492a8ac0b0a26e25f2b19d342918f",
              "status": "affected",
              "version": "3acb50c18d8d6650f10919464ade4dcdaf41d62f",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/sctp/input.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.8"
            },
            {
              "lessThan": "4.8",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.249",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.209",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.151",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.71",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.14.*",
              "status": "unaffected",
              "version": "5.14.10",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "5.15",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.249",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.209",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.151",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.71",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.14.10",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb\n\nWe should always check if skb_header_pointer\u0027s return is NULL before\nusing it, otherwise it may cause null-ptr-deref, as syzbot reported:\n\n  KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]\n  RIP: 0010:sctp_rcv_ootb net/sctp/input.c:705 [inline]\n  RIP: 0010:sctp_rcv+0x1d84/0x3220 net/sctp/input.c:196\n  Call Trace:\n  \u003cIRQ\u003e\n   sctp6_rcv+0x38/0x60 net/sctp/ipv6.c:1109\n   ip6_protocol_deliver_rcu+0x2e9/0x1ca0 net/ipv6/ip6_input.c:422\n   ip6_input_finish+0x62/0x170 net/ipv6/ip6_input.c:463\n   NF_HOOK include/linux/netfilter.h:307 [inline]\n   NF_HOOK include/linux/netfilter.h:301 [inline]\n   ip6_input+0x9c/0xd0 net/ipv6/ip6_input.c:472\n   dst_input include/net/dst.h:460 [inline]\n   ip6_rcv_finish net/ipv6/ip6_input.c:76 [inline]\n   NF_HOOK include/linux/netfilter.h:307 [inline]\n   NF_HOOK include/linux/netfilter.h:301 [inline]\n   ipv6_rcv+0x28c/0x3c0 net/ipv6/ip6_input.c:297"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:N - The bug is in sctp_rcv_ootb(), reached from sctp4_rcv/sctp6_rcv on the IPPROTO_SCTP receive path when processing out-of-the-blue packets; a remote peer can deliver crafted SCTP packets over IPv4/IPv6 with no local socket required beyond the SCTP stack being loaded.\nAC:L - The attacker only needs to send crafted SCTP packets that fail association lookup and enter the OOTB walker; there is no race, victim-side state, or other condition outside the attacker\u2019s control required to hit the unchecked skb_header_pointer() result.\nPR:N - OOTB handling runs for packets that match no association, falls back to the per-net ctl_sock endpoint, and requires no authentication or privileges on the target.\nUI:N - Exploitation requires only sending network packets; no user action such as opening a file or establishing an application session is needed.\nS:U - Impact is confined to the vulnerable host\u2019s kernel (crash/DoS); this does not cross a VM, IOMMU, or other security authority boundary.\nC:N - The defect is a pure NULL pointer dereference of skb_header_pointer()\u2019s return value when reading ch-\u003elength; it does not disclose kernel memory.\nI:N - There is no write, type confusion, or other memory corruption primitive\u2014only a NULL deref\u2014so integrity cannot be compromised beyond the crash itself.\nA:H - Dereferencing the NULL chunk header pointer causes a kernel oops/general protection fault in softirq/IRQ receive context, which is a full availability impact and can be repeated with further packets."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T08:47:38.908Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/77bc7dcf0fcc1519341a91788d7a2914fcfddf6d"
        },
        {
          "url": "https://git.kernel.org/stable/c/8c630a7b4f9dec63f08bd881ab77984a724a5124"
        },
        {
          "url": "https://git.kernel.org/stable/c/ec018021cf445abbe8e2f3e2a7f1dcc813cb8ea1"
        },
        {
          "url": "https://git.kernel.org/stable/c/9c6591ae8e63f93c895ad5e2703c36c548aac997"
        },
        {
          "url": "https://git.kernel.org/stable/c/8180611c238e11676612eb2a9828b1c7a3a4d77b"
        },
        {
          "url": "https://git.kernel.org/stable/c/f7e745f8e94492a8ac0b0a26e25f2b19d342918f"
        }
      ],
      "title": "sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2021-47397",
    "datePublished": "2024-05-21T15:03:53.431Z",
    "dateReserved": "2024-05-21T14:58:30.815Z",
    "dateUpdated": "2026-08-05T08:47:38.908Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2021-47397",
      "date": "2026-09-16",
      "epss": "0.00769",
      "percentile": "0.53837"
    },
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"4.8\", \"versionEndExcluding\": \"4.14.249\", \"matchCriteriaId\": \"71991869-C1C9-4F7C-B9D3-9402D9418DE2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"4.15\", \"versionEndExcluding\": \"4.19.209\", \"matchCriteriaId\": \"21C23429-F802-4256-B3C2-9EEA76AC11FF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"4.20\", \"versionEndExcluding\": \"5.4.151\", \"matchCriteriaId\": \"BFFC8E38-107A-4B6F-9FFD-9B2FD8B89EF0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"5.5\", \"versionEndExcluding\": \"5.10.71\", \"matchCriteriaId\": \"60C740E4-6C54-40CD-A914-2232D8FC781D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"5.11\", \"versionEndExcluding\": \"5.14.10\", \"matchCriteriaId\": \"1A437B0D-8305-4C72-B691-D26986A126CF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:5.15:rc1:*:*:*:*:*:*\", \"matchCriteriaId\": \"E46C74C6-B76B-4C94-A6A4-FD2FFF62D644\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:5.15:rc2:*:*:*:*:*:*\", \"matchCriteriaId\": \"60134C3A-06E4-48C1-B04F-2903732A4E56\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:5.15:rc3:*:*:*:*:*:*\", \"matchCriteriaId\": \"0460DA88-8FE1-46A2-9DDA-1F1ABA552E71\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nsctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb\\n\\nWe should always check if skb_header_pointer\u0027s return is NULL before\\nusing it, otherwise it may cause null-ptr-deref, as syzbot reported:\\n\\n  KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]\\n  RIP: 0010:sctp_rcv_ootb net/sctp/input.c:705 [inline]\\n  RIP: 0010:sctp_rcv+0x1d84/0x3220 net/sctp/input.c:196\\n  Call Trace:\\n  \u003cIRQ\u003e\\n   sctp6_rcv+0x38/0x60 net/sctp/ipv6.c:1109\\n   ip6_protocol_deliver_rcu+0x2e9/0x1ca0 net/ipv6/ip6_input.c:422\\n   ip6_input_finish+0x62/0x170 net/ipv6/ip6_input.c:463\\n   NF_HOOK include/linux/netfilter.h:307 [inline]\\n   NF_HOOK include/linux/netfilter.h:301 [inline]\\n   ip6_input+0x9c/0xd0 net/ipv6/ip6_input.c:472\\n   dst_input include/net/dst.h:460 [inline]\\n   ip6_rcv_finish net/ipv6/ip6_input.c:76 [inline]\\n   NF_HOOK include/linux/netfilter.h:307 [inline]\\n   NF_HOOK include/linux/netfilter.h:301 [inline]\\n   ipv6_rcv+0x28c/0x3c0 net/ipv6/ip6_input.c:297\"}, {\"lang\": \"es\", \"value\": \"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: sctp: se rompe si skb_header_pointer devuelve NULL en sctp_rcv_ootb. Siempre debemos verificar si el retorno de skb_header_pointer es NULL antes de usarlo; de lo contrario, puede causar null-ptr-deref, como inform\\u00f3 syzbot: KASAN : null-ptr-deref en el rango [0x0000000000000000-0x0000000000000007] RIP: 0010:sctp_rcv_ootb net/sctp/input.c:705 [en l\\u00ednea] RIP: 0010:sctp_rcv+0x1d84/0x3220 net/sctp/input .c:196 Seguimiento de llamadas :  sctp6_rcv+0x38/0x60 net/sctp/ipv6.c:1109 ip6_protocol_deliver_rcu+0x2e9/0x1ca0 net/ipv6/ip6_input.c:422 ip6_input_finish+0x62/0x170 net/ipv6/ip6_input.c:463 incluir/linux /netfilter.h:307 [en l\\u00ednea] NF_HOOK include/linux/netfilter.h:301 [en l\\u00ednea] ip6_input+0x9c/0xd0 net/ipv6/ip6_input.c:472 dst_input include/net/dst.h:460 [en l\\u00ednea] ip6_rcv_finish net/ipv6/ip6_input.c:76 [en l\\u00ednea] NF_HOOK include/linux/netfilter.h:307 [en l\\u00ednea] NF_HOOK include/linux/netfilter.h:301 [en l\\u00ednea] ipv6_rcv+0x28c/0x3c0 net/ipv6/ip6_input.c :297\"}]",
      "id": "CVE-2021-47397",
      "lastModified": "2024-12-24T16:06:56.063",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\", \"baseScore\": 5.5, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"LOCAL\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 1.8, \"impactScore\": 3.6}]}",
      "published": "2024-05-21T15:15:25.017",
      "references": "[{\"url\": \"https://git.kernel.org/stable/c/77bc7dcf0fcc1519341a91788d7a2914fcfddf6d\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/8180611c238e11676612eb2a9828b1c7a3a4d77b\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/8c630a7b4f9dec63f08bd881ab77984a724a5124\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/9c6591ae8e63f93c895ad5e2703c36c548aac997\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/ec018021cf445abbe8e2f3e2a7f1dcc813cb8ea1\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/f7e745f8e94492a8ac0b0a26e25f2b19d342918f\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/77bc7dcf0fcc1519341a91788d7a2914fcfddf6d\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/8180611c238e11676612eb2a9828b1c7a3a4d77b\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/8c630a7b4f9dec63f08bd881ab77984a724a5124\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/9c6591ae8e63f93c895ad5e2703c36c548aac997\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/ec018021cf445abbe8e2f3e2a7f1dcc813cb8ea1\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/f7e745f8e94492a8ac0b0a26e25f2b19d342918f\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}]",
      "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "vulnStatus": "Analyzed",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-476\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2021-47397\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-05-21T15:15:25.017\",\"lastModified\":\"2026-08-04T10:17:01.747\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nsctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb\\n\\nWe should always check if skb_header_pointer\u0027s return is NULL before\\nusing it, otherwise it may cause null-ptr-deref, as syzbot reported:\\n\\n  KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]\\n  RIP: 0010:sctp_rcv_ootb net/sctp/input.c:705 [inline]\\n  RIP: 0010:sctp_rcv+0x1d84/0x3220 net/sctp/input.c:196\\n  Call Trace:\\n  \u003cIRQ\u003e\\n   sctp6_rcv+0x38/0x60 net/sctp/ipv6.c:1109\\n   ip6_protocol_deliver_rcu+0x2e9/0x1ca0 net/ipv6/ip6_input.c:422\\n   ip6_input_finish+0x62/0x170 net/ipv6/ip6_input.c:463\\n   NF_HOOK include/linux/netfilter.h:307 [inline]\\n   NF_HOOK include/linux/netfilter.h:301 [inline]\\n   ip6_input+0x9c/0xd0 net/ipv6/ip6_input.c:472\\n   dst_input include/net/dst.h:460 [inline]\\n   ip6_rcv_finish net/ipv6/ip6_input.c:76 [inline]\\n   NF_HOOK include/linux/netfilter.h:307 [inline]\\n   NF_HOOK include/linux/netfilter.h:301 [inline]\\n   ipv6_rcv+0x28c/0x3c0 net/ipv6/ip6_input.c:297\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: sctp: se rompe si skb_header_pointer devuelve NULL en sctp_rcv_ootb. Siempre debemos verificar si el retorno de skb_header_pointer es NULL antes de usarlo; de lo contrario, puede causar null-ptr-deref, como inform\u00f3 syzbot: KASAN : null-ptr-deref en el rango [0x0000000000000000-0x0000000000000007] RIP: 0010:sctp_rcv_ootb net/sctp/input.c:705 [en l\u00ednea] RIP: 0010:sctp_rcv+0x1d84/0x3220 net/sctp/input .c:196 Seguimiento de llamadas :  sctp6_rcv+0x38/0x60 net/sctp/ipv6.c:1109 ip6_protocol_deliver_rcu+0x2e9/0x1ca0 net/ipv6/ip6_input.c:422 ip6_input_finish+0x62/0x170 net/ipv6/ip6_input.c:463 incluir/linux /netfilter.h:307 [en l\u00ednea] NF_HOOK include/linux/netfilter.h:301 [en l\u00ednea] ip6_input+0x9c/0xd0 net/ipv6/ip6_input.c:472 dst_input include/net/dst.h:460 [en l\u00ednea] ip6_rcv_finish net/ipv6/ip6_input.c:76 [en l\u00ednea] NF_HOOK include/linux/netfilter.h:307 [en l\u00ednea] NF_HOOK include/linux/netfilter.h:301 [en l\u00ednea] ipv6_rcv+0x28c/0x3c0 net/ipv6/ip6_input.c :297\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"net/sctp/input.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"3acb50c18d8d6650f10919464ade4dcdaf41d62f\",\"lessThan\":\"77bc7dcf0fcc1519341a91788d7a2914fcfddf6d\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"3acb50c18d8d6650f10919464ade4dcdaf41d62f\",\"lessThan\":\"8c630a7b4f9dec63f08bd881ab77984a724a5124\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"3acb50c18d8d6650f10919464ade4dcdaf41d62f\",\"lessThan\":\"ec018021cf445abbe8e2f3e2a7f1dcc813cb8ea1\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"3acb50c18d8d6650f10919464ade4dcdaf41d62f\",\"lessThan\":\"9c6591ae8e63f93c895ad5e2703c36c548aac997\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"3acb50c18d8d6650f10919464ade4dcdaf41d62f\",\"lessThan\":\"8180611c238e11676612eb2a9828b1c7a3a4d77b\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"3acb50c18d8d6650f10919464ade4dcdaf41d62f\",\"lessThan\":\"f7e745f8e94492a8ac0b0a26e25f2b19d342918f\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"net/sctp/input.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"4.8\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"4.8\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"4.14.249\",\"lessThanOrEqual\":\"4.14.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"4.19.209\",\"lessThanOrEqual\":\"4.19.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.4.151\",\"lessThanOrEqual\":\"5.4.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.71\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.14.10\",\"lessThanOrEqual\":\"5.14.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2024-09-10T15:38:10.305778Z\",\"id\":\"CVE-2021-47397\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-476\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.8\",\"versionEndExcluding\":\"4.14.249\",\"matchCriteriaId\":\"71991869-C1C9-4F7C-B9D3-9402D9418DE2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.15\",\"versionEndExcluding\":\"4.19.209\",\"matchCriteriaId\":\"21C23429-F802-4256-B3C2-9EEA76AC11FF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.20\",\"versionEndExcluding\":\"5.4.151\",\"matchCriteriaId\":\"BFFC8E38-107A-4B6F-9FFD-9B2FD8B89EF0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.5\",\"versionEndExcluding\":\"5.10.71\",\"matchCriteriaId\":\"60C740E4-6C54-40CD-A914-2232D8FC781D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.14.10\",\"matchCriteriaId\":\"1A437B0D-8305-4C72-B691-D26986A126CF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:5.15:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"E46C74C6-B76B-4C94-A6A4-FD2FFF62D644\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:5.15:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"60134C3A-06E4-48C1-B04F-2903732A4E56\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:5.15:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"0460DA88-8FE1-46A2-9DDA-1F1ABA552E71\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/77bc7dcf0fcc1519341a91788d7a2914fcfddf6d\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/8180611c238e11676612eb2a9828b1c7a3a4d77b\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/8c630a7b4f9dec63f08bd881ab77984a724a5124\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/9c6591ae8e63f93c895ad5e2703c36c548aac997\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/ec018021cf445abbe8e2f3e2a7f1dcc813cb8ea1\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/f7e745f8e94492a8ac0b0a26e25f2b19d342918f\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/77bc7dcf0fcc1519341a91788d7a2914fcfddf6d\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/8180611c238e11676612eb2a9828b1c7a3a4d77b\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/8c630a7b4f9dec63f08bd881ab77984a724a5124\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/9c6591ae8e63f93c895ad5e2703c36c548aac997\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/ec018021cf445abbe8e2f3e2a7f1dcc813cb8ea1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/f7e745f8e94492a8ac0b0a26e25f2b19d342918f\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-08-04T19:58:44+00:00",
      "cve": "CVE-2021-47397",
      "id": "CVE-2021-47397",
      "initial_release_date": "2021-01-01T00:00:00+00:00",
      "product_status:known_affected": "90",
      "product_status:known_not_affected": "108",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-47397.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-16T00:28:52Z",
      "cve": "CVE-2021-47397",
      "id": "CVE-2021-47397",
      "initial_release_date": "2024-05-23T15:55:47Z",
      "product_status:known_affected": "411",
      "product_status:known_not_affected": "103",
      "product_status:recommended": "522",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2021-47397",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2021-47397.json",
      "version": "61"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://git.kernel.org/stable/c/77bc7dcf0fcc1519341a91788d7a2914fcfddf6d\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/8c630a7b4f9dec63f08bd881ab77984a724a5124\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/ec018021cf445abbe8e2f3e2a7f1dcc813cb8ea1\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/9c6591ae8e63f93c895ad5e2703c36c548aac997\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/8180611c238e11676612eb2a9828b1c7a3a4d77b\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/f7e745f8e94492a8ac0b0a26e25f2b19d342918f\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-04T05:39:59.634Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2021-47397\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-09-10T15:38:10.305778Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-09-11T12:42:18.250Z\"}}], \"cna\": {\"title\": \"sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb\", \"metrics\": [{\"cvssV3_1\": {\"version\": \"3.1\", \"baseScore\": 7.5, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"AV:N - The bug is in sctp_rcv_ootb(), reached from sctp4_rcv/sctp6_rcv on the IPPROTO_SCTP receive path when processing out-of-the-blue packets; a remote peer can deliver crafted SCTP packets over IPv4/IPv6 with no local socket required beyond the SCTP stack being loaded.\\nAC:L - The attacker only needs to send crafted SCTP packets that fail association lookup and enter the OOTB walker; there is no race, victim-side state, or other condition outside the attacker\\u2019s control required to hit the unchecked skb_header_pointer() result.\\nPR:N - OOTB handling runs for packets that match no association, falls back to the per-net ctl_sock endpoint, and requires no authentication or privileges on the target.\\nUI:N - Exploitation requires only sending network packets; no user action such as opening a file or establishing an application session is needed.\\nS:U - Impact is confined to the vulnerable host\\u2019s kernel (crash/DoS); this does not cross a VM, IOMMU, or other security authority boundary.\\nC:N - The defect is a pure NULL pointer dereference of skb_header_pointer()\\u2019s return value when reading ch-\u003elength; it does not disclose kernel memory.\\nI:N - There is no write, type confusion, or other memory corruption primitive\\u2014only a NULL deref\\u2014so integrity cannot be compromised beyond the crash itself.\\nA:H - Dereferencing the NULL chunk header pointer causes a kernel oops/general protection fault in softirq/IRQ receive context, which is a full availability impact and can be repeated with further packets.\"}]}], \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"3acb50c18d8d6650f10919464ade4dcdaf41d62f\", \"lessThan\": \"77bc7dcf0fcc1519341a91788d7a2914fcfddf6d\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"3acb50c18d8d6650f10919464ade4dcdaf41d62f\", \"lessThan\": \"8c630a7b4f9dec63f08bd881ab77984a724a5124\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"3acb50c18d8d6650f10919464ade4dcdaf41d62f\", \"lessThan\": \"ec018021cf445abbe8e2f3e2a7f1dcc813cb8ea1\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"3acb50c18d8d6650f10919464ade4dcdaf41d62f\", \"lessThan\": \"9c6591ae8e63f93c895ad5e2703c36c548aac997\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"3acb50c18d8d6650f10919464ade4dcdaf41d62f\", \"lessThan\": \"8180611c238e11676612eb2a9828b1c7a3a4d77b\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"3acb50c18d8d6650f10919464ade4dcdaf41d62f\", \"lessThan\": \"f7e745f8e94492a8ac0b0a26e25f2b19d342918f\", \"versionType\": \"git\"}], \"programFiles\": [\"net/sctp/input.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.8\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"4.8\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"4.14.249\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.14.*\"}, {\"status\": \"unaffected\", \"version\": \"4.19.209\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.19.*\"}, {\"status\": \"unaffected\", \"version\": \"5.4.151\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.4.*\"}, {\"status\": \"unaffected\", \"version\": \"5.10.71\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.10.*\"}, {\"status\": \"unaffected\", \"version\": \"5.14.10\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.14.*\"}, {\"status\": \"unaffected\", \"version\": \"5.15\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"net/sctp/input.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/77bc7dcf0fcc1519341a91788d7a2914fcfddf6d\"}, {\"url\": \"https://git.kernel.org/stable/c/8c630a7b4f9dec63f08bd881ab77984a724a5124\"}, {\"url\": \"https://git.kernel.org/stable/c/ec018021cf445abbe8e2f3e2a7f1dcc813cb8ea1\"}, {\"url\": \"https://git.kernel.org/stable/c/9c6591ae8e63f93c895ad5e2703c36c548aac997\"}, {\"url\": \"https://git.kernel.org/stable/c/8180611c238e11676612eb2a9828b1c7a3a4d77b\"}, {\"url\": \"https://git.kernel.org/stable/c/f7e745f8e94492a8ac0b0a26e25f2b19d342918f\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nsctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb\\n\\nWe should always check if skb_header_pointer\u0027s return is NULL before\\nusing it, otherwise it may cause null-ptr-deref, as syzbot reported:\\n\\n  KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]\\n  RIP: 0010:sctp_rcv_ootb net/sctp/input.c:705 [inline]\\n  RIP: 0010:sctp_rcv+0x1d84/0x3220 net/sctp/input.c:196\\n  Call Trace:\\n  \u003cIRQ\u003e\\n   sctp6_rcv+0x38/0x60 net/sctp/ipv6.c:1109\\n   ip6_protocol_deliver_rcu+0x2e9/0x1ca0 net/ipv6/ip6_input.c:422\\n   ip6_input_finish+0x62/0x170 net/ipv6/ip6_input.c:463\\n   NF_HOOK include/linux/netfilter.h:307 [inline]\\n   NF_HOOK include/linux/netfilter.h:301 [inline]\\n   ip6_input+0x9c/0xd0 net/ipv6/ip6_input.c:472\\n   dst_input include/net/dst.h:460 [inline]\\n   ip6_rcv_finish net/ipv6/ip6_input.c:76 [inline]\\n   NF_HOOK include/linux/netfilter.h:307 [inline]\\n   NF_HOOK include/linux/netfilter.h:301 [inline]\\n   ipv6_rcv+0x28c/0x3c0 net/ipv6/ip6_input.c:297\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.14.249\", \"versionStartIncluding\": \"4.8\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.19.209\", \"versionStartIncluding\": \"4.8\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.4.151\", \"versionStartIncluding\": \"4.8\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.10.71\", \"versionStartIncluding\": \"4.8\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.14.10\", \"versionStartIncluding\": \"4.8\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.15\", \"versionStartIncluding\": \"4.8\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2026-08-05T08:47:38.908Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2021-47397\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-08-05T08:47:38.908Z\", \"dateReserved\": \"2024-05-21T14:58:30.815Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-05-21T15:03:53.431Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.