Race condition in Linux kernel - CVE-2021-38199

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU61208

Race condition in Linux kernel - CVE-2021-38199

Published: March 9, 2022


Vulnerability identifier: #VU61208
CSH Severity: Low
CVSS v4: 5.3 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2021-38199
CWE-ID: CWE-362
Exploitation vector: Adjecent network
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to fs/nfs/nfs4client.c in the Linux kernel has incorrect connection-setup ordering. A remote attacker with access to a remote NFSv4 server can perform a denial of service (DoS) attack by arranging the server to be unreachable during trunking detection.


Affected software

Linux kernel
Amazon Linux AMI
Anolis OS
Ubuntu
openEuler
linux-image-aws-hwe (Ubuntu package)
linux-image-lowlatency (Ubuntu package)
linux-image-generic-lpae (Ubuntu package)
linux-image-generic (Ubuntu package)
linux-image-virtual (Ubuntu package)
linux-image-4.15.0-162-generic (Ubuntu package)
linux-image-4.15.0-162-generic-lpae (Ubuntu package)
linux-image-4.15.0-162-lowlatency (Ubuntu package)
linux-image-virtual-hwe-16.04 (Ubuntu package)
linux-image-lowlatency-hwe-16.04 (Ubuntu package)
linux-image-generic-hwe-16.04 (Ubuntu package)
linux-image-dell300x (Ubuntu package)
linux-image-4.15.0-1030-dell300x (Ubuntu package)
linux-image-4.15.0-1083-oracle (Ubuntu package)
linux-image-oracle-lts-18.04 (Ubuntu package)
linux-image-raspi2 (Ubuntu package)
linux-image-4.15.0-1098-raspi2 (Ubuntu package)
linux-image-kvm (Ubuntu package)
linux-image-4.15.0-1102-kvm (Ubuntu package)
linux-image-4.15.0-1111-gcp (Ubuntu package)
linux-image-gcp-lts-18.04 (Ubuntu package)
linux-image-snapdragon (Ubuntu package)
linux-image-aws-lts-18.04 (Ubuntu package)
linux-image-4.15.0-1115-aws (Ubuntu package)
linux-image-4.15.0-1115-snapdragon (Ubuntu package)
linux-image-azure-lts-18.04 (Ubuntu package)
linux-image-4.15.0-1126-azure (Ubuntu package)
bpftool
perf-debuginfo
kernel-devel
kernel-debuginfo
python2-perf-debuginfo
kernel-tools
kernel-tools-devel
bpftool-debuginfo
python3-perf
python2-perf
kernel-tools-debuginfo
kernel-source
python3-perf-debuginfo
perf
kernel-debugsource
kernel
kernel-modules-internal
kernel-modules-extra
kernel-modules
kernel-headers
kernel-debug-modules-extra
kernel-debug-modules
kernel-debug-devel
kernel-debug-core
kernel-debug
kernel-core
kernel-tools-libs-devel
kernel-tools-libs
python-perf
linux-image-5.4.0-87-generic (Ubuntu package)
linux-image-5.4.0-87-generic-lpae (Ubuntu package)
linux-image-5.4.0-87-lowlatency (Ubuntu package)
linux-image-snapdragon-hwe-18.04 (Ubuntu package)
linux-image-generic-hwe-18.04 (Ubuntu package)
linux-image-oem-osp1 (Ubuntu package)
linux-image-lowlatency-hwe-18.04 (Ubuntu package)
linux-image-generic-lpae-hwe-18.04 (Ubuntu package)
linux-image-oem (Ubuntu package)
linux-image-virtual-hwe-18.04 (Ubuntu package)
linux-image-5.4.0-88-generic (Ubuntu package)
linux-image-5.4.0-88-lowlatency (Ubuntu package)
linux-image-5.4.0-88-generic-lpae (Ubuntu package)
linux-image-5.4.0-1024-gkeop (Ubuntu package)
linux-image-gkeop-5.4 (Ubuntu package)
linux-image-gkeop (Ubuntu package)
linux-image-raspi-hwe-18.04 (Ubuntu package)
linux-image-5.4.0-1044-raspi (Ubuntu package)
linux-image-raspi (Ubuntu package)
linux-image-5.4.0-1047-kvm (Ubuntu package)
linux-image-gcp (Ubuntu package)
linux-image-5.4.0-1053-gke (Ubuntu package)
linux-image-gke-5.4 (Ubuntu package)
linux-image-5.4.0-1053-gcp (Ubuntu package)
linux-image-gcp-lts-20.04 (Ubuntu package)
linux-image-gke (Ubuntu package)
linux-image-oracle-lts-20.04 (Ubuntu package)
linux-image-5.4.0-1055-oracle (Ubuntu package)
linux-image-oracle (Ubuntu package)
linux-image-aws (Ubuntu package)
linux-image-5.4.0-1057-aws (Ubuntu package)
linux-image-aws-lts-20.04 (Ubuntu package)
linux-image-azure (Ubuntu package)
linux-image-azure-lts-20.04 (Ubuntu package)
linux-image-5.4.0-1059-azure (Ubuntu package)
linux-image-5.4.0-1061-azure (Ubuntu package)
linux-image-5.8.0-1043-azure (Ubuntu package)
linux-image-oem-20.04b (Ubuntu package)
linux-image-oem-20.04 (Ubuntu package)
linux-image-5.10.0-1049-oem (Ubuntu package)
linux-image-generic-64k (Ubuntu package)
linux-image-5.11.0-37-generic (Ubuntu package)
linux-image-5.11.0-37-generic-lpae (Ubuntu package)
linux-image-5.11.0-37-lowlatency (Ubuntu package)
linux-image-5.11.0-37-generic-64k (Ubuntu package)
linux-image-lowlatency-hwe-20.04 (Ubuntu package)
linux-image-generic-64k-hwe-20.04 (Ubuntu package)
linux-image-generic-lpae-hwe-20.04 (Ubuntu package)
linux-image-generic-hwe-20.04 (Ubuntu package)
linux-image-virtual-hwe-20.04 (Ubuntu package)
linux-image-5.11.0-1017-kvm (Ubuntu package)
linux-image-5.11.0-1017-azure (Ubuntu package)
linux-image-azure-edge (Ubuntu package)
linux-image-raspi-nolpae (Ubuntu package)
linux-image-5.11.0-1019-raspi (Ubuntu package)
linux-image-5.11.0-1019-raspi-nolpae (Ubuntu package)
linux-image-5.11.0-1019-aws (Ubuntu package)
linux-image-5.11.0-1019-azure (Ubuntu package)
linux-image-5.11.0-1019-oracle (Ubuntu package)
linux-image-5.11.0-1020-gcp (Ubuntu package)
linux-image-oem-20.04c (Ubuntu package)
linux-image-5.13.0-1014-oem (Ubuntu package)

How to mitigate CVE-2021-38199

Install updates from vendor's website.

Linux kernel - update to 5.13.4
linux-image-aws-hwe (Ubuntu package) - update to Ubuntu Pro (Infra-only)
linux-image-lowlatency (Ubuntu package) - addressed in versions 4.15.0.162.151, 5.4.0.88.92, 5.11.0.37.39
linux-image-generic-lpae (Ubuntu package) - addressed in versions 4.15.0.162.151, 5.4.0.88.92, 5.11.0.37.39
linux-image-generic (Ubuntu package) - addressed in versions 4.15.0.162.151, 5.4.0.88.92, 5.11.0.37.39
linux-image-virtual (Ubuntu package) - addressed in versions 4.15.0.162.151, 5.4.0.88.92, 5.11.0.37.39
linux-image-4.15.0-162-generic (Ubuntu package) - update to 4.15.0-162.170
linux-image-4.15.0-162-generic-lpae (Ubuntu package) - update to 4.15.0-162.170
linux-image-4.15.0-162-lowlatency (Ubuntu package) - update to 4.15.0-162.170
linux-image-virtual-hwe-16.04 (Ubuntu package) - update to 4.15.0.210.193
linux-image-lowlatency-hwe-16.04 (Ubuntu package) - update to 4.15.0.210.193
linux-image-generic-hwe-16.04 (Ubuntu package) - update to 4.15.0.210.193
linux-image-dell300x (Ubuntu package) - update to 4.15.0.1030.32
linux-image-4.15.0-1030-dell300x (Ubuntu package) - update to 4.15.0-1030.35
linux-image-4.15.0-1083-oracle (Ubuntu package) - update to 4.15.0-1083.91
linux-image-oracle-lts-18.04 (Ubuntu package) - update to 4.15.0.1083.93
linux-image-raspi2 (Ubuntu package) - addressed in versions 4.15.0.1098.96, 5.4.0.1044.79
linux-image-4.15.0-1098-raspi2 (Ubuntu package) - update to 4.15.0-1098.104
linux-image-kvm (Ubuntu package) - addressed in versions 4.15.0.1102.98, 5.4.0.1047.46, 5.11.0.1017.18
linux-image-4.15.0-1102-kvm (Ubuntu package) - update to 4.15.0-1102.104
linux-image-4.15.0-1111-gcp (Ubuntu package) - update to 4.15.0-1111.125
linux-image-gcp-lts-18.04 (Ubuntu package) - update to 4.15.0.1111.130
linux-image-snapdragon (Ubuntu package) - update to 4.15.0.1115.118
linux-image-aws-lts-18.04 (Ubuntu package) - update to 4.15.0.1115.118
linux-image-4.15.0-1115-aws (Ubuntu package) - update to 4.15.0-1115.122
linux-image-4.15.0-1115-snapdragon (Ubuntu package) - update to 4.15.0-1115.124
linux-image-azure-lts-18.04 (Ubuntu package) - update to 4.15.0.1126.99
linux-image-4.15.0-1126-azure (Ubuntu package) - update to 4.15.0-1126.139
bpftool - update to 4.19.90-2108.5.0.0103
perf-debuginfo - update to 4.19.90-2108.5.0.0103
kernel-devel - update to 4.19.90-2108.5.0.0103
kernel-debuginfo - update to 4.19.90-2108.5.0.0103
python2-perf-debuginfo - update to 4.19.90-2108.5.0.0103
kernel-tools - update to 4.19.90-2108.5.0.0103
kernel-tools-devel - update to 4.19.90-2108.5.0.0103
bpftool-debuginfo - update to 4.19.90-2108.5.0.0103
python3-perf - update to 4.19.90-2108.5.0.0103
python2-perf - update to 4.19.90-2108.5.0.0103
kernel-tools-debuginfo - update to 4.19.90-2108.5.0.0103
kernel-source - update to 4.19.90-2108.5.0.0103
python3-perf-debuginfo - update to 4.19.90-2108.5.0.0103
perf - update to 4.19.90-2108.5.0.0103
kernel-debugsource - update to 4.19.90-2108.5.0.0103
kernel - update to 4.19.90-2108.5.0.0103
python3-perf - update to 4.19.91-25.6
perf - addressed in versions 4.19.91-25.6, 4.19.91-26
kernel-modules-internal - update to 4.19.91-25.6
kernel-modules-extra - update to 4.19.91-25.6
kernel-modules - update to 4.19.91-25.6
kernel-headers - addressed in versions 4.19.91-25.6, 4.19.91-26
kernel-devel - addressed in versions 4.19.91-25.6, 4.19.91-26
kernel-debug-modules-extra - update to 4.19.91-25.6
kernel-debug-modules - update to 4.19.91-25.6
kernel-debug-devel - addressed in versions 4.19.91-25.6, 4.19.91-26
kernel-debug-core - update to 4.19.91-25.6
kernel-debug - addressed in versions 4.19.91-25.6, 4.19.91-26
kernel-core - update to 4.19.91-25.6
kernel - addressed in versions 4.19.91-25.6, 4.19.91-26
bpftool - addressed in versions 4.19.91-25.6, 4.19.91-26
kernel-tools - addressed in versions 4.19.91-25.6, 4.19.91-26
kernel-tools-libs-devel - addressed in versions 4.19.91-25.6, 4.19.91-26
kernel-tools-libs - addressed in versions 4.19.91-25.6, 4.19.91-26
python-perf - update to 4.19.91-26
linux-image-5.4.0-87-generic (Ubuntu package) - update to 5.4.0-87.98~18.04.1
linux-image-5.4.0-87-generic-lpae (Ubuntu package) - update to 5.4.0-87.98~18.04.1
linux-image-5.4.0-87-lowlatency (Ubuntu package) - update to 5.4.0-87.98~18.04.1
linux-image-snapdragon-hwe-18.04 (Ubuntu package) - update to 5.4.0.87.98~18.04.78
linux-image-generic-hwe-18.04 (Ubuntu package) - update to 5.4.0.87.98~18.04.78
linux-image-oem-osp1 (Ubuntu package) - addressed in versions 5.4.0.87.98~18.04.78, 5.4.0.88.92
linux-image-lowlatency-hwe-18.04 (Ubuntu package) - update to 5.4.0.87.98~18.04.78
linux-image-generic-lpae-hwe-18.04 (Ubuntu package) - update to 5.4.0.87.98~18.04.78
linux-image-oem (Ubuntu package) - addressed in versions 5.4.0.87.98~18.04.78, 5.4.0.88.92, 5.4.0.202.198
linux-image-virtual-hwe-18.04 (Ubuntu package) - update to 5.4.0.87.98~18.04.78
linux-image-5.4.0-88-generic (Ubuntu package) - update to 5.4.0-88.99
linux-image-5.4.0-88-lowlatency (Ubuntu package) - update to 5.4.0-88.99
linux-image-5.4.0-88-generic-lpae (Ubuntu package) - update to 5.4.0-88.99
linux-image-5.4.0-1024-gkeop (Ubuntu package) - addressed in versions 5.4.0-1024.25, 5.4.0-1024.25~18.04.1
linux-image-gkeop-5.4 (Ubuntu package) - addressed in versions 5.4.0.1024.25~18.04.25, 5.4.0.1024.27
linux-image-gkeop (Ubuntu package) - update to 5.4.0.1024.27
linux-image-raspi-hwe-18.04 (Ubuntu package) - update to 5.4.0.1044.47
linux-image-5.4.0-1044-raspi (Ubuntu package) - addressed in versions 5.4.0-1044.48, 5.4.0-1044.48~18.04.1
linux-image-raspi (Ubuntu package) - addressed in versions 5.4.0.1044.79, 5.11.0.1019.17
linux-image-5.4.0-1047-kvm (Ubuntu package) - update to 5.4.0-1047.49
linux-image-gcp (Ubuntu package) - addressed in versions 5.4.0.1053.39, 5.11.0.1020.20, 6.8.0-1019.21~22.04.1
linux-image-5.4.0-1053-gke (Ubuntu package) - addressed in versions 5.4.0-1053.56, 5.4.0-1053.56~18.04.1
linux-image-gke-5.4 (Ubuntu package) - addressed in versions 5.4.0.1053.56~18.04.18, 5.4.0.1053.63
linux-image-5.4.0-1053-gcp (Ubuntu package) - addressed in versions 5.4.0-1053.57, 5.4.0-1053.57~18.04.1
linux-image-gcp-lts-20.04 (Ubuntu package) - update to 5.4.0.1053.63
linux-image-gke (Ubuntu package) - addressed in versions 5.4.0.1053.63, 5.11.0.1020.20, 6.8.0-1015.19
linux-image-oracle-lts-20.04 (Ubuntu package) - update to 5.4.0.1055.55
linux-image-5.4.0-1055-oracle (Ubuntu package) - addressed in versions 5.4.0-1055.59, 5.4.0-1055.59~18.04.1
linux-image-oracle (Ubuntu package) - addressed in versions 5.4.0.1055.59~18.04.35, 5.11.0.1019.20~20.04.12, 6.8.0-1017.18~22.04.1
linux-image-aws (Ubuntu package) - addressed in versions 5.4.0.1057.40, 5.11.0.1019.20~20.04.18
linux-image-5.4.0-1057-aws (Ubuntu package) - addressed in versions 5.4.0-1057.60, 5.4.0-1057.60~18.04.1
linux-image-aws-lts-20.04 (Ubuntu package) - update to 5.4.0.1057.60
linux-image-azure (Ubuntu package) - addressed in versions 5.4.0.1059.39, 5.4.0.1061.41, 5.8.0.1043.46~20.04.15, 5.11.0.1017.18, 5.11.0.1019.20, 6.8.0-1018.21~22.04.1
linux-image-azure-lts-20.04 (Ubuntu package) - addressed in versions 5.4.0.1059.57, 5.4.0.1061.59
linux-image-5.4.0-1059-azure (Ubuntu package) - addressed in versions 5.4.0-1059.62, 5.4.0-1059.62~18.04.1
linux-image-5.4.0-1061-azure (Ubuntu package) - addressed in versions 5.4.0-1061.64, 5.4.0-1061.64~18.04.1
linux-image-5.8.0-1043-azure (Ubuntu package) - update to 5.8.0-1043.46~20.04.1
linux-image-oem-20.04b (Ubuntu package) - update to 5.10.0.1049.51
linux-image-oem-20.04 (Ubuntu package) - addressed in versions 5.10.0.1049.51, 5.11.0.37.39
linux-image-5.10.0-1049-oem (Ubuntu package) - update to 5.10.0-1049.51
linux-image-generic-64k (Ubuntu package) - update to 5.11.0.37.39
linux-image-5.11.0-37-generic (Ubuntu package) - update to 5.11.0-37.41~20.04.2
linux-image-5.11.0-37-generic-lpae (Ubuntu package) - update to 5.11.0-37.41~20.04.2
linux-image-5.11.0-37-lowlatency (Ubuntu package) - update to 5.11.0-37.41~20.04.2
linux-image-5.11.0-37-generic-64k (Ubuntu package) - update to 5.11.0-37.41~20.04.2
linux-image-lowlatency-hwe-20.04 (Ubuntu package) - update to 5.11.0.37.41~20.04.16
linux-image-generic-64k-hwe-20.04 (Ubuntu package) - update to 5.11.0.37.41~20.04.16
linux-image-generic-lpae-hwe-20.04 (Ubuntu package) - update to 5.11.0.37.41~20.04.16
linux-image-generic-hwe-20.04 (Ubuntu package) - update to 5.11.0.37.41~20.04.16
linux-image-virtual-hwe-20.04 (Ubuntu package) - update to 5.11.0.37.41~20.04.16
linux-image-5.11.0-1017-kvm (Ubuntu package) - update to 5.11.0-1017.18
linux-image-5.11.0-1017-azure (Ubuntu package) - update to 5.11.0-1017.18~20.04.1
linux-image-azure-edge (Ubuntu package) - addressed in versions 5.11.0.1017.18~20.04.16, 5.11.0.1019.20~20.04.18
linux-image-raspi-nolpae (Ubuntu package) - update to 5.11.0.1019.17
linux-image-5.11.0-1019-raspi (Ubuntu package) - update to 5.11.0-1019.20
linux-image-5.11.0-1019-raspi-nolpae (Ubuntu package) - update to 5.11.0-1019.20
linux-image-5.11.0-1019-aws (Ubuntu package) - update to 5.11.0-1019.20~20.04.1
linux-image-5.11.0-1019-azure (Ubuntu package) - update to 5.11.0-1019.20~20.04.1
linux-image-5.11.0-1019-oracle (Ubuntu package) - update to 5.11.0-1019.20~20.04.1
linux-image-5.11.0-1020-gcp (Ubuntu package) - update to 5.11.0-1020.22
linux-image-oem-20.04c (Ubuntu package) - update to 5.13.0.1014.18
linux-image-5.13.0-1014-oem (Ubuntu package) - update to 5.13.0-1014.18

External References

Related Security Bulletins