Unrated severityNVD Advisory· Published May 21, 2024· Updated May 4, 2025

ipv6: fix another slab-out-of-bounds in fib6_nh_flush_exceptions

CVE-2021-47291

Description

In the Linux kernel, the following vulnerability has been resolved:

While running the self-tests on a KASAN enabled kernel, I observed a slab-out-of-bounds splat very similar to the one reported in commit 821bbf79fe46 ("ipv6: Fix KASAN: slab-out-of-bounds Read in fib6_nh_flush_exceptions").

We additionally need to take care of fib6_metrics initialization failure when the caller provides an nh.

The fix is similar, explicitly free the route instead of calling fib6_info_release on a half-initialized object.

Affected products

osv-coords82 versions
pkg:rpm/suse/kernel-64kb&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/kernel-64kb&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/kernel-64kb&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/kernel-default-base&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Micro%205.1 pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Micro%205.2 pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/kernel-default&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2015%20SP2 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2015%20SP3 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP2 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP3 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Micro%205.1 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Micro%205.2 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/kernel-docs&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/kernel-livepatch-SLE15-SP2_Update_41&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP2 pkg:rpm/suse/kernel-livepatch-SLE15-SP2_Update_42&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP2 pkg:rpm/suse/kernel-livepatch-SLE15-SP2_Update_45&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP2 pkg:rpm/suse/kernel-livepatch-SLE15-SP2_Update_46&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP2 pkg:rpm/suse/kernel-livepatch-SLE15-SP2_Update_47&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP2 pkg:rpm/suse/kernel-livepatch-SLE15-SP2_Update_48&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP2 pkg:rpm/suse/kernel-livepatch-SLE15-SP2_Update_49&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP2 pkg:rpm/suse/kernel-livepatch-SLE15-SP2_Update_50&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP2 pkg:rpm/suse/kernel-livepatch-SLE15-SP2_Update_51&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP2 pkg:rpm/suse/kernel-livepatch-SLE15-SP3_Update_36&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP3 pkg:rpm/suse/kernel-livepatch-SLE15-SP3_Update_41&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP3 pkg:rpm/suse/kernel-livepatch-SLE15-SP3_Update_42&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP3 pkg:rpm/suse/kernel-livepatch-SLE15-SP3_Update_43&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP3 pkg:rpm/suse/kernel-livepatch-SLE15-SP3_Update_44&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP3 pkg:rpm/suse/kernel-livepatch-SLE15-SP3_Update_45&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP3 pkg:rpm/suse/kernel-livepatch-SLE15-SP3_Update_46&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP3 pkg:rpm/suse/kernel-livepatch-SLE15-SP3_Update_47&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP3 pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/kernel-preempt&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/kernel-preempt&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/kernel-preempt&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/kernel-preempt&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/kernel-preempt&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/kernel-preempt&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/kernel-preempt&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/kernel-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.1 pkg:rpm/suse/kernel-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.2 pkg:rpm/suse/kernel-source&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/kernel-source-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.1 pkg:rpm/suse/kernel-source-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.2 pkg:rpm/suse/kernel-syms&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/kernel-zfcpdump&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS
< 5.3.18-150300.59.170.1+ 81 more
- (no CPE)range: < 5.3.18-150300.59.170.1
- (no CPE)range: < 5.3.18-150300.59.170.1
- (no CPE)range: < 5.3.18-150300.59.170.1
- (no CPE)range: < 5.3.18-150300.59.170.1.150300.18.100.1
- (no CPE)range: < 5.3.18-150200.24.200.1.150200.9.103.1
- (no CPE)range: < 5.3.18-150300.59.170.1.150300.18.100.1
- (no CPE)range: < 5.3.18-150300.59.170.1.150300.18.100.1
- (no CPE)range: < 5.3.18-150300.59.170.1.150300.18.100.1
- (no CPE)range: < 5.3.18-150200.24.200.1.150200.9.103.1
- (no CPE)range: < 5.3.18-150300.59.170.1.150300.18.100.1
- (no CPE)range: < 5.3.18-150200.24.200.1.150200.9.103.1
- (no CPE)range: < 5.3.18-150300.59.170.1.150300.18.100.1
- (no CPE)range: < 5.3.18-150300.59.170.1
- (no CPE)range: < 5.3.18-150200.24.200.1
- (no CPE)range: < 5.3.18-150300.59.170.1
- (no CPE)range: < 5.3.18-150200.24.200.1
- (no CPE)range: < 5.3.18-150300.59.170.1
- (no CPE)range: < 5.3.18-150200.24.200.1
- (no CPE)range: < 5.3.18-150300.59.170.1
- (no CPE)range: < 5.3.18-150300.59.170.1
- (no CPE)range: < 5.3.18-150300.59.170.1
- (no CPE)range: < 5.3.18-150200.24.200.1
- (no CPE)range: < 5.3.18-150300.59.170.1
- (no CPE)range: < 5.3.18-150200.24.200.1
- (no CPE)range: < 5.3.18-150300.59.170.1
- (no CPE)range: < 5.3.18-150300.59.170.2
- (no CPE)range: < 5.3.18-150200.24.200.1
- (no CPE)range: < 5.3.18-150300.59.170.2
- (no CPE)range: < 5.3.18-150200.24.200.1
- (no CPE)range: < 5.3.18-150300.59.170.2
- (no CPE)range: < 5.3.18-150200.24.200.1
- (no CPE)range: < 5.3.18-150300.59.170.2
- (no CPE)range: < 14-150200.2.1
- (no CPE)range: < 14-150200.2.1
- (no CPE)range: < 10-150200.2.1
- (no CPE)range: < 8-150200.5.6.1
- (no CPE)range: < 7-150200.5.6.1
- (no CPE)range: < 6-150200.5.6.1
- (no CPE)range: < 3-150200.5.6.1
- (no CPE)range: < 2-150200.5.6.1
- (no CPE)range: < 1-150200.5.3.1
- (no CPE)range: < 14-150300.2.1
- (no CPE)range: < 11-150300.2.1
- (no CPE)range: < 8-150300.7.6.1
- (no CPE)range: < 7-150300.7.6.1
- (no CPE)range: < 6-150300.7.6.1
- (no CPE)range: < 3-150300.7.6.1
- (no CPE)range: < 2-150300.7.6.1
- (no CPE)range: < 1-150300.7.3.1
- (no CPE)range: < 5.3.18-150300.59.170.1
- (no CPE)range: < 5.3.18-150200.24.200.1
- (no CPE)range: < 5.3.18-150300.59.170.1
- (no CPE)range: < 5.3.18-150200.24.200.1
- (no CPE)range: < 5.3.18-150300.59.170.1
- (no CPE)range: < 5.3.18-150200.24.200.1
- (no CPE)range: < 5.3.18-150300.59.170.1
- (no CPE)range: < 5.3.18-150300.59.170.1
- (no CPE)range: < 5.3.18-150200.24.200.1
- (no CPE)range: < 5.3.18-150300.59.170.1
- (no CPE)range: < 5.3.18-150200.24.200.1
- (no CPE)range: < 5.3.18-150300.59.170.1
- (no CPE)range: < 5.3.18-150200.24.200.1
- (no CPE)range: < 5.3.18-150300.59.170.1
- (no CPE)range: < 5.3.18-150300.178.1
- (no CPE)range: < 5.3.18-150300.178.1
- (no CPE)range: < 5.3.18-150300.59.170.1
- (no CPE)range: < 5.3.18-150200.24.200.1
- (no CPE)range: < 5.3.18-150300.59.170.1
- (no CPE)range: < 5.3.18-150200.24.200.1
- (no CPE)range: < 5.3.18-150300.59.170.1
- (no CPE)range: < 5.3.18-150200.24.200.1
- (no CPE)range: < 5.3.18-150300.59.170.1
- (no CPE)range: < 5.3.18-150300.178.1
- (no CPE)range: < 5.3.18-150300.178.1
- (no CPE)range: < 5.3.18-150300.59.170.1
- (no CPE)range: < 5.3.18-150200.24.200.1
- (no CPE)range: < 5.3.18-150300.59.170.1
- (no CPE)range: < 5.3.18-150200.24.200.1
- (no CPE)range: < 5.3.18-150300.59.170.1
- (no CPE)range: < 5.3.18-150200.24.200.1
- (no CPE)range: < 5.3.18-150300.59.170.1
- (no CPE)range: < 5.3.18-150300.59.170.1
Linux/Linuxcpe-rescue
Range: 5.3

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000