Improper locking in Linux kernel - CVE-2021-47041

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU89745

Improper locking in Linux kernel - CVE-2021-47041

Published: May 22, 2024 / Updated: May 14, 2025


Vulnerability identifier: #VU89745
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2021-47041
CWE-ID: CWE-667
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the nvmet_tcp_state_change() function in drivers/nvme/target/tcp.c. An remote attacker can send specially crafted packets to the system and perform a denial of service (DoS) attack.


Affected software

Linux kernel
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Availability Extension 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
SUSE Enterprise Storage
SUSE Linux Enterprise Live Patching
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP2 Business Critical Linux
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 Business Critical Linux
SUSE Linux Enterprise Server 15 SP3 LTSS
openSUSE Leap
kernel-livepatch-5_3_18-150200_24_191-default-debuginfo
kernel-livepatch-SLE15-SP2_Update_48-debugsource
kernel-livepatch-5_3_18-150200_24_191-default
kernel-livepatch-SLE15-SP3_Update_44-debugsource
kernel-livepatch-5_3_18-150300_59_161-preempt-debuginfo
kernel-livepatch-5_3_18-150300_59_161-preempt
kernel-livepatch-5_3_18-150300_59_161-default-debuginfo
kernel-livepatch-5_3_18-150300_59_161-default
ocfs2-kmp-default-debuginfo
kernel-default-debugsource
kernel-default
kernel-default-livepatch-devel
kernel-default-debuginfo
kernel-default-livepatch
cluster-md-kmp-default
reiserfs-kmp-default-debuginfo
reiserfs-kmp-default
kernel-docs
kernel-devel
kernel-source
kernel-macros
kernel-preempt-devel
kernel-default-devel-debuginfo
kernel-default-devel
ocfs2-kmp-default
dlm-kmp-default
gfs2-kmp-default-debuginfo
cluster-md-kmp-default-debuginfo
gfs2-kmp-default
kernel-preempt-debuginfo
dlm-kmp-default-debuginfo
kernel-preempt
kernel-preempt-devel-debuginfo
kernel-obs-build
kernel-syms
kernel-preempt-debugsource
kernel-obs-build-debugsource
kernel-default-base
dtb-qcom
kselftests-kmp-64kb-debuginfo
kernel-64kb-optional
ocfs2-kmp-64kb
dlm-kmp-64kb
gfs2-kmp-64kb-debuginfo
cluster-md-kmp-64kb
kernel-64kb-devel-debuginfo
dtb-nvidia
dtb-socionext
dtb-amd
dtb-altera
dtb-arm
kselftests-kmp-preempt-debuginfo
dtb-aarch64
kernel-zfcpdump-debugsource
kernel-zfcpdump-debuginfo
kernel-zfcpdump
dlm-kmp-preempt
reiserfs-kmp-preempt
kernel-preempt-optional-debuginfo
kselftests-kmp-preempt
cluster-md-kmp-preempt
kernel-preempt-livepatch-devel
dtb-sprd
kernel-64kb
dtb-marvell
dtb-exynos
kernel-64kb-debuginfo
dtb-mediatek
dtb-apm
dtb-broadcom
ocfs2-kmp-64kb-debuginfo
dtb-renesas
kernel-64kb-devel
dlm-kmp-64kb-debuginfo
dtb-amlogic
kernel-64kb-optional-debuginfo
kernel-64kb-extra
dtb-rockchip
cluster-md-kmp-64kb-debuginfo
dtb-cavium
gfs2-kmp-64kb
kernel-64kb-debugsource
dtb-allwinner
dtb-freescale
dtb-zte
kernel-64kb-livepatch-devel
dtb-xilinx
kselftests-kmp-64kb
reiserfs-kmp-64kb
dtb-hisilicon
reiserfs-kmp-64kb-debuginfo
dtb-al
dtb-lg
kernel-64kb-extra-debuginfo
kernel-kvmsmall-debugsource
gfs2-kmp-preempt-debuginfo
kernel-debug-debugsource
kernel-kvmsmall-livepatch-devel
kernel-debug-devel
kernel-kvmsmall-debuginfo
kernel-debug-debuginfo
kernel-kvmsmall-devel-debuginfo
kernel-debug-devel-debuginfo
kernel-kvmsmall-devel
kernel-debug-livepatch-devel
kernel-debug
kernel-kvmsmall
kernel-source-vanilla
kernel-default-optional-debuginfo
ocfs2-kmp-preempt-debuginfo
reiserfs-kmp-preempt-debuginfo
kernel-preempt-extra-debuginfo
cluster-md-kmp-preempt-debuginfo
kernel-preempt-extra
gfs2-kmp-preempt
dlm-kmp-preempt-debuginfo
ocfs2-kmp-preempt
kernel-preempt-optional
kernel-obs-qa
kselftests-kmp-default
kselftests-kmp-default-debuginfo
kernel-default-extra-debuginfo
kernel-default-extra
kernel-default-optional
kernel-default-base-rebuild
kernel-docs-html
kernel-rt
kernel-rt-debugsource
kernel-rt-debuginfo
kernel-source-rt
PowerStore T
EMC Cloud Tiering Appliance

How to mitigate CVE-2021-47041

Install updates from vendor's website.

Linux kernel - addressed in versions 5.4.119, 5.10.37, 5.11.21, 5.12.4, 5.13
kernel-livepatch-5_3_18-150200_24_191-default-debuginfo - update to 1-150200.5.3.1
kernel-livepatch-SLE15-SP2_Update_48-debugsource - update to 1-150200.5.3.1
kernel-livepatch-5_3_18-150200_24_191-default - update to 1-150200.5.3.1
kernel-livepatch-SLE15-SP3_Update_44-debugsource - update to 1-150300.7.3.1
kernel-livepatch-5_3_18-150300_59_161-preempt-debuginfo - update to 1-150300.7.3.1
kernel-livepatch-5_3_18-150300_59_161-preempt - update to 1-150300.7.3.1
kernel-livepatch-5_3_18-150300_59_161-default-debuginfo - update to 1-150300.7.3.1
kernel-livepatch-5_3_18-150300_59_161-default - update to 1-150300.7.3.1
PowerStore T - update to 4.0.0.2-2365061
ocfs2-kmp-default-debuginfo - addressed in versions 5.3.18-150200.24.191.1, 5.3.18-150300.59.161.1
kernel-default-debugsource - addressed in versions 5.3.18-150200.24.191.1, 5.3.18-150300.59.161.1
kernel-default - addressed in versions 5.3.18-150200.24.191.1, 5.3.18-150300.59.161.1
kernel-default-livepatch-devel - addressed in versions 5.3.18-150200.24.191.1, 5.3.18-150300.59.161.1
kernel-default-debuginfo - addressed in versions 5.3.18-150200.24.191.1, 5.3.18-150300.59.161.1
kernel-default-livepatch - addressed in versions 5.3.18-150200.24.191.1, 5.3.18-150300.59.161.1
cluster-md-kmp-default - addressed in versions 5.3.18-150200.24.191.1, 5.3.18-150300.59.161.1
reiserfs-kmp-default-debuginfo - addressed in versions 5.3.18-150200.24.191.1, 5.3.18-150300.59.161.1
reiserfs-kmp-default - addressed in versions 5.3.18-150200.24.191.1, 5.3.18-150300.59.161.1
kernel-docs - addressed in versions 5.3.18-150200.24.191.1, 5.3.18-150300.59.161.2
kernel-devel - addressed in versions 5.3.18-150200.24.191.1, 5.3.18-150300.59.161.1
kernel-source - addressed in versions 5.3.18-150200.24.191.1, 5.3.18-150300.59.161.1
kernel-macros - addressed in versions 5.3.18-150200.24.191.1, 5.3.18-150300.59.161.1
kernel-preempt-devel - addressed in versions 5.3.18-150200.24.191.1, 5.3.18-150300.59.161.1
kernel-default-devel-debuginfo - addressed in versions 5.3.18-150200.24.191.1, 5.3.18-150300.59.161.1
kernel-default-devel - addressed in versions 5.3.18-150200.24.191.1, 5.3.18-150300.59.161.1
ocfs2-kmp-default - addressed in versions 5.3.18-150200.24.191.1, 5.3.18-150300.59.161.1
dlm-kmp-default - addressed in versions 5.3.18-150200.24.191.1, 5.3.18-150300.59.161.1
gfs2-kmp-default-debuginfo - addressed in versions 5.3.18-150200.24.191.1, 5.3.18-150300.59.161.1
cluster-md-kmp-default-debuginfo - addressed in versions 5.3.18-150200.24.191.1, 5.3.18-150300.59.161.1
gfs2-kmp-default - addressed in versions 5.3.18-150200.24.191.1, 5.3.18-150300.59.161.1
kernel-preempt-debuginfo - addressed in versions 5.3.18-150200.24.191.1, 5.3.18-150300.59.161.1
dlm-kmp-default-debuginfo - addressed in versions 5.3.18-150200.24.191.1, 5.3.18-150300.59.161.1
kernel-preempt - addressed in versions 5.3.18-150200.24.191.1, 5.3.18-150300.59.161.1
kernel-preempt-devel-debuginfo - addressed in versions 5.3.18-150200.24.191.1, 5.3.18-150300.59.161.1
kernel-obs-build - addressed in versions 5.3.18-150200.24.191.1, 5.3.18-150300.59.161.1
kernel-syms - addressed in versions 5.3.18-150200.24.191.1, 5.3.18-150300.59.161.1
kernel-preempt-debugsource - addressed in versions 5.3.18-150200.24.191.1, 5.3.18-150300.59.161.1
kernel-obs-build-debugsource - addressed in versions 5.3.18-150200.24.191.1, 5.3.18-150300.59.161.1
kernel-default-base - addressed in versions 5.3.18-150200.24.191.1.150200.9.97.1, 5.3.18-150300.59.161.1.150300.18.94.1
dtb-qcom - update to 5.3.18-150300.59.161.1
kselftests-kmp-64kb-debuginfo - update to 5.3.18-150300.59.161.1
kernel-64kb-optional - update to 5.3.18-150300.59.161.1
ocfs2-kmp-64kb - update to 5.3.18-150300.59.161.1
dlm-kmp-64kb - update to 5.3.18-150300.59.161.1
gfs2-kmp-64kb-debuginfo - update to 5.3.18-150300.59.161.1
cluster-md-kmp-64kb - update to 5.3.18-150300.59.161.1
kernel-64kb-devel-debuginfo - update to 5.3.18-150300.59.161.1
dtb-nvidia - update to 5.3.18-150300.59.161.1
dtb-socionext - update to 5.3.18-150300.59.161.1
dtb-amd - update to 5.3.18-150300.59.161.1
dtb-altera - update to 5.3.18-150300.59.161.1
dtb-arm - update to 5.3.18-150300.59.161.1
kselftests-kmp-preempt-debuginfo - update to 5.3.18-150300.59.161.1
dtb-aarch64 - update to 5.3.18-150300.59.161.1
kernel-zfcpdump-debugsource - update to 5.3.18-150300.59.161.1
kernel-zfcpdump-debuginfo - update to 5.3.18-150300.59.161.1
kernel-zfcpdump - update to 5.3.18-150300.59.161.1
dlm-kmp-preempt - update to 5.3.18-150300.59.161.1
reiserfs-kmp-preempt - update to 5.3.18-150300.59.161.1
kernel-preempt-optional-debuginfo - update to 5.3.18-150300.59.161.1
kselftests-kmp-preempt - update to 5.3.18-150300.59.161.1
cluster-md-kmp-preempt - update to 5.3.18-150300.59.161.1
kernel-preempt-livepatch-devel - update to 5.3.18-150300.59.161.1
dtb-sprd - update to 5.3.18-150300.59.161.1
kernel-64kb - update to 5.3.18-150300.59.161.1
dtb-marvell - update to 5.3.18-150300.59.161.1
dtb-exynos - update to 5.3.18-150300.59.161.1
kernel-64kb-debuginfo - update to 5.3.18-150300.59.161.1
dtb-mediatek - update to 5.3.18-150300.59.161.1
dtb-apm - update to 5.3.18-150300.59.161.1
dtb-broadcom - update to 5.3.18-150300.59.161.1
ocfs2-kmp-64kb-debuginfo - update to 5.3.18-150300.59.161.1
dtb-renesas - update to 5.3.18-150300.59.161.1
kernel-64kb-devel - update to 5.3.18-150300.59.161.1
dlm-kmp-64kb-debuginfo - update to 5.3.18-150300.59.161.1
dtb-amlogic - update to 5.3.18-150300.59.161.1
kernel-64kb-optional-debuginfo - update to 5.3.18-150300.59.161.1
kernel-64kb-extra - update to 5.3.18-150300.59.161.1
dtb-rockchip - update to 5.3.18-150300.59.161.1
cluster-md-kmp-64kb-debuginfo - update to 5.3.18-150300.59.161.1
dtb-cavium - update to 5.3.18-150300.59.161.1
gfs2-kmp-64kb - update to 5.3.18-150300.59.161.1
kernel-64kb-debugsource - update to 5.3.18-150300.59.161.1
dtb-allwinner - update to 5.3.18-150300.59.161.1
dtb-freescale - update to 5.3.18-150300.59.161.1
dtb-zte - update to 5.3.18-150300.59.161.1
kernel-64kb-livepatch-devel - update to 5.3.18-150300.59.161.1
dtb-xilinx - update to 5.3.18-150300.59.161.1
kselftests-kmp-64kb - update to 5.3.18-150300.59.161.1
reiserfs-kmp-64kb - update to 5.3.18-150300.59.161.1
dtb-hisilicon - update to 5.3.18-150300.59.161.1
reiserfs-kmp-64kb-debuginfo - update to 5.3.18-150300.59.161.1
dtb-al - update to 5.3.18-150300.59.161.1
dtb-lg - update to 5.3.18-150300.59.161.1
kernel-64kb-extra-debuginfo - update to 5.3.18-150300.59.161.1
kernel-kvmsmall-debugsource - update to 5.3.18-150300.59.161.1
gfs2-kmp-preempt-debuginfo - update to 5.3.18-150300.59.161.1
kernel-debug-debugsource - update to 5.3.18-150300.59.161.1
kernel-kvmsmall-livepatch-devel - update to 5.3.18-150300.59.161.1
kernel-debug-devel - update to 5.3.18-150300.59.161.1
kernel-kvmsmall-debuginfo - update to 5.3.18-150300.59.161.1
kernel-debug-debuginfo - update to 5.3.18-150300.59.161.1
kernel-kvmsmall-devel-debuginfo - update to 5.3.18-150300.59.161.1
kernel-debug-devel-debuginfo - update to 5.3.18-150300.59.161.1
kernel-kvmsmall-devel - update to 5.3.18-150300.59.161.1
kernel-debug-livepatch-devel - update to 5.3.18-150300.59.161.1
kernel-debug - update to 5.3.18-150300.59.161.1
kernel-kvmsmall - update to 5.3.18-150300.59.161.1
kernel-source-vanilla - update to 5.3.18-150300.59.161.1
kernel-default-optional-debuginfo - update to 5.3.18-150300.59.161.1
ocfs2-kmp-preempt-debuginfo - update to 5.3.18-150300.59.161.1
reiserfs-kmp-preempt-debuginfo - update to 5.3.18-150300.59.161.1
kernel-preempt-extra-debuginfo - update to 5.3.18-150300.59.161.1
cluster-md-kmp-preempt-debuginfo - update to 5.3.18-150300.59.161.1
kernel-preempt-extra - update to 5.3.18-150300.59.161.1
gfs2-kmp-preempt - update to 5.3.18-150300.59.161.1
dlm-kmp-preempt-debuginfo - update to 5.3.18-150300.59.161.1
ocfs2-kmp-preempt - update to 5.3.18-150300.59.161.1
kernel-preempt-optional - update to 5.3.18-150300.59.161.1
kernel-obs-qa - update to 5.3.18-150300.59.161.1
kselftests-kmp-default - update to 5.3.18-150300.59.161.1
kselftests-kmp-default-debuginfo - update to 5.3.18-150300.59.161.1
kernel-default-extra-debuginfo - update to 5.3.18-150300.59.161.1
kernel-default-extra - update to 5.3.18-150300.59.161.1
kernel-default-optional - update to 5.3.18-150300.59.161.1
kernel-default-base-rebuild - update to 5.3.18-150300.59.161.1.150300.18.94.1
kernel-docs-html - update to 5.3.18-150300.59.161.2
kernel-rt - update to 5.3.18-150300.169.1
kernel-rt-debugsource - update to 5.3.18-150300.169.1
kernel-rt-debuginfo - update to 5.3.18-150300.169.1
kernel-source-rt - update to 5.3.18-150300.169.1
EMC Cloud Tiering Appliance - update to 13.2.0.2.31

External References

Related Security Bulletins