critical
CVE-2021-43267
kernel: Insufficient validation of user-supplied sizes for the MSG_CRYPTO message type
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.
Severity by source
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat8.8CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Trivy's own label is CRITICAL. Rated critical by NVD, CBL-Mariner, Photon OS. Rated lower by Red Hat (high), AlmaLinux (high), Bottlerocket (high), Oracle (high), Rocky Linux (high), Ubuntu (medium).
Description
An issue was discovered in net/tipc/crypto.c in the Linux kernel before 5.14.16. The Transparent Inter-Process Communication (TIPC) functionality allows remote attackers to exploit insufficient validation of user-supplied sizes for the MSG_CRYPTO message type.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| CBL-Mariner 1.0 | kernel | 0:5.10.78.1-1.cm1 |
| CBL-Mariner 2.0 | kernel | 0:5.10.78.1-1.cm2 |
| Photon OS 4.0 | bpftool, linux, linux-aws and 12 more | 5.10.46-2.ph4 and 1 more |
| alma 8 | kernel-tools-libs-devel | 4.18.0-348.2.1.el8_5 |
| bottlerocket | kernel | 1.4.2-8fbeae7c |
| debian 11 | linux | 5.10.84-1 |
| debian 12 | linux | 5.14.16-1 |
| debian 13 | linux | 5.14.16-1 |
| debian 14 | linux | 5.14.16-1 |
| echo | linux | 5.14.16-1 |
| Oracle Linux 8 | bpftool, kernel, kernel-abi-stablelists and 17 more | 4.18.0-348.2.1.el8_5 |
| rocky 8 | bpftool, kernel, kernel-abi-stablelists and 18 more | 4.18.0-348.2.1.el8_5 and 1 more |
Show all 104 entries from 19 sources
| Source | Package | Fixed in |
|---|---|---|
| CBL-Mariner 1.0 | kernel | 0:5.10.78.1-1.cm1 |
| CBL-Mariner 2.0 | kernel | 0:5.10.78.1-1.cm2 |
| Photon OS 4.0 | bpftool | 5.10.46-2.ph4 |
| Photon OS 4.0 | linux | 5.10.46-2.ph4 |
| Photon OS 4.0 | linux-aws | 5.10.78-1.ph4 |
| Photon OS 4.0 | linux-devel | 5.10.46-2.ph4 |
| Photon OS 4.0 | linux-docs | 5.10.46-2.ph4 |
| Photon OS 4.0 | linux-drivers-gpu | 5.10.46-2.ph4 |
| Photon OS 4.0 | linux-drivers-intel-sgx | 5.10.46-2.ph4 |
| Photon OS 4.0 | linux-drivers-sound | 5.10.46-2.ph4 |
| Photon OS 4.0 | linux-oprofile | 5.10.46-2.ph4 |
| Photon OS 4.0 | linux-python3-perf | 5.10.46-2.ph4 |
| Photon OS 4.0 | linux-rt | 5.10.78-1.ph4 |
| Photon OS 4.0 | linux-secure | 5.10.78-1.ph4 |
| Photon OS 4.0 | linux-secure-devel | 5.10.78-1.ph4 |
| Photon OS 4.0 | linux-secure-docs | 5.10.78-1.ph4 |
| Photon OS 4.0 | linux-tools | 5.10.46-2.ph4 |
| alma 8 | kernel-tools-libs-devel | 4.18.0-348.2.1.el8_5 |
| bottlerocket | kernel | 1.4.2-8fbeae7c |
| debian 11 | linux | 5.10.84-1 |
| debian 12 | linux | 5.14.16-1 |
| debian 13 | linux | 5.14.16-1 |
| debian 14 | linux | 5.14.16-1 |
| echo | linux | 5.14.16-1 |
| Oracle Linux 8 | bpftool | 4.18.0-348.2.1.el8_5 |
| Oracle Linux 8 | kernel | 4.18.0-348.2.1.el8_5 |
| Oracle Linux 8 | kernel-abi-stablelists | 4.18.0-348.2.1.el8_5 |
| Oracle Linux 8 | kernel-core | 4.18.0-348.2.1.el8_5 |
| Oracle Linux 8 | kernel-cross-headers | 4.18.0-348.2.1.el8_5 |
| Oracle Linux 8 | kernel-debug | 4.18.0-348.2.1.el8_5 |
| Oracle Linux 8 | kernel-debug-core | 4.18.0-348.2.1.el8_5 |
| Oracle Linux 8 | kernel-debug-devel | 4.18.0-348.2.1.el8_5 |
| Oracle Linux 8 | kernel-debug-modules | 4.18.0-348.2.1.el8_5 |
| Oracle Linux 8 | kernel-debug-modules-extra | 4.18.0-348.2.1.el8_5 |
| Oracle Linux 8 | kernel-devel | 4.18.0-348.2.1.el8_5 |
| Oracle Linux 8 | kernel-doc | 4.18.0-348.2.1.el8_5 |
| Oracle Linux 8 | kernel-headers | 4.18.0-348.2.1.el8_5 |
| Oracle Linux 8 | kernel-modules | 4.18.0-348.2.1.el8_5 |
| Oracle Linux 8 | kernel-modules-extra | 4.18.0-348.2.1.el8_5 |
| Oracle Linux 8 | kernel-tools | 4.18.0-348.2.1.el8_5 |
| Oracle Linux 8 | kernel-tools-libs | 4.18.0-348.2.1.el8_5 |
| Oracle Linux 8 | kernel-tools-libs-devel | 4.18.0-348.2.1.el8_5 |
| Oracle Linux 8 | perf | 4.18.0-348.2.1.el8_5 |
| Oracle Linux 8 | python3-perf | 4.18.0-348.2.1.el8_5 |
| rocky 8 | bpftool | 4.18.0-348.2.1.el8_5 |
| rocky 8 | kernel | 4.18.0-348.2.1.el8_5 |
| rocky 8 | kernel-abi-stablelists | 4.18.0-348.2.1.el8_5 |
| rocky 8 | kernel-core | 4.18.0-348.2.1.el8_5 |
| rocky 8 | kernel-cross-headers | 4.18.0-348.2.1.el8_5 |
| rocky 8 | kernel-debug | 4.18.0-348.2.1.el8_5 |
| rocky 8 | kernel-debug-core | 4.18.0-348.2.1.el8_5 |
| rocky 8 | kernel-debug-devel | 4.18.0-348.2.1.el8_5 |
| rocky 8 | kernel-debug-modules | 4.18.0-348.2.1.el8_5 |
| rocky 8 | kernel-debug-modules-extra | 4.18.0-348.2.1.el8_5 |
| rocky 8 | kernel-debuginfo-common-aarch64 | 0.0.0 |
| rocky 8 | kernel-debuginfo-common-x86_64 | 4.18.0-348.2.1.el8_5 |
| rocky 8 | kernel-devel | 4.18.0-348.2.1.el8_5 |
| rocky 8 | kernel-doc | 4.18.0-348.2.1.el8_5 |
| rocky 8 | kernel-headers | 4.18.0-348.2.1.el8_5 |
| rocky 8 | kernel-modules | 4.18.0-348.2.1.el8_5 |
| rocky 8 | kernel-modules-extra | 4.18.0-348.2.1.el8_5 |
| rocky 8 | kernel-tools | 4.18.0-348.2.1.el8_5 |
| rocky 8 | kernel-tools-libs | 4.18.0-348.2.1.el8_5 |
| rocky 8 | perf | 4.18.0-348.2.1.el8_5 |
| rocky 8 | python3-perf | 4.18.0-348.2.1.el8_5 |
| root.io debian 11 | rootio-linux | 5.10.84-1 |
| root.io debian 12 | rootio-linux | 5.14.16-1 |
| root.io debian 13 | rootio-linux | 5.14.16-1 |
| ubuntu 20.04 | linux-aws-5.11 | 5.11.0-1023.24~20.04.1 |
| ubuntu 20.04 | linux-azure-5.11 | 5.11.0-1023.24~20.04.1 |
| ubuntu 20.04 | linux-gcp-5.11 | 5.11.0-1024.26~20.04.1 |
| ubuntu 20.04 | linux-hwe-5.11 | 5.11.0-44.48~20.04.2 |
| ubuntu 20.04 | linux-hwe-5.13 | 5.13.0-23.23~20.04.2 |
| ubuntu 20.04 | linux-oem-5.10 | 5.10.0-1053.55 |
| ubuntu 20.04 | linux-oem-5.13 | 5.13.0-1026.32 |
| ubuntu 20.04 | linux-oem-5.14 | 5.14.0-1008.8 |
| ubuntu 20.04 | linux-oracle-5.11 | 5.11.0-1023.24~20.04.1 |
| ubuntu 20.04 | linux-riscv-5.11 | 5.11.0-1024.25~20.04.1 |
| ubuntu 20.04-ESM | linux-aws-5.11 | 5.11.0-1023.24~20.04.1 |
| ubuntu 20.04-ESM | linux-azure-5.11 | 5.11.0-1023.24~20.04.1 |
| ubuntu 20.04-ESM | linux-gcp-5.11 | 5.11.0-1024.26~20.04.1 |
| ubuntu 20.04-ESM | linux-hwe-5.11 | 5.11.0-44.48~20.04.2 |
| ubuntu 20.04-ESM | linux-hwe-5.13 | 5.13.0-23.23~20.04.2 |
| ubuntu 20.04-ESM | linux-oem-5.10 | 5.10.0-1053.55 |
| ubuntu 20.04-ESM | linux-oem-5.13 | 5.13.0-1026.32 |
| ubuntu 20.04-ESM | linux-oem-5.14 | 5.14.0-1008.8 |
| ubuntu 20.04-ESM | linux-oracle-5.11 | 5.11.0-1023.24~20.04.1 |
| ubuntu 20.04-ESM | linux-riscv-5.11 | 5.11.0-1024.25~20.04.1 |
| ubuntu 21.04 | linux | 5.11.0-44.48 |
| ubuntu 21.04 | linux-aws | 5.11.0-1023.24 |
| ubuntu 21.04 | linux-azure | 5.11.0-1023.24 |
| ubuntu 21.04 | linux-gcp | 5.11.0-1024.26 |
| ubuntu 21.04 | linux-kvm | 5.11.0-1021.23 |
| ubuntu 21.04 | linux-oracle | 5.11.0-1023.24 |
| ubuntu 21.04 | linux-raspi | 5.11.0-1024.26 |
| ubuntu 21.04 | linux-riscv | 5.11.0-1024.25 |
| ubuntu 21.10 | linux | 5.13.0-23.23 |
| ubuntu 21.10 | linux-aws | 5.13.0-1008.9 |
| ubuntu 21.10 | linux-azure | 5.13.0-1009.10 |
| ubuntu 21.10 | linux-gcp | 5.13.0-1008.9 |
| ubuntu 21.10 | linux-kvm | 5.13.0-1007.7 |
| ubuntu 21.10 | linux-oracle | 5.13.0-1011.13 |
| ubuntu 21.10 | linux-raspi | 5.13.0-1012.14 |
| ubuntu 21.10 | linux-riscv | 5.13.0-1007.7 |
References
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-43267
- http://www.openwall.com/lists/oss-security/2022/02/10/1
- https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-20317.json
- https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-43267.json
- https://access.redhat.com/security/cve/CVE-2021-43267
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.16
- https://git.kernel.org/linus/fa40d9734a57bcbfa79a280189799f76c88f7bb0%20%285.15%29
- https://github.com/bottlerocket-os/bottlerocket/security/advisories/GHSA-vcv5-pc8f-xmhp
All 21 references
- https://github.com/torvalds/linux/commit/fa40d9734a57bcbfa79a280189799f76c88f7bb0
- https://linux.oracle.com/cve/CVE-2021-43267.html
- https://linux.oracle.com/errata/ELSA-2021-4647.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CVWL7HZV5T5OEKJPO2D67RMFMKBBXGGB/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RDDEW4APTYKJK365HC2JZIVXYUV7ZRN7/
- https://nvd.nist.gov/vuln/detail/CVE-2021-43267
- https://security.netapp.com/advisory/ntap-20211125-0002/
- https://ubuntu.com/security/notices/USN-5165-1
- https://ubuntu.com/security/notices/USN-5207-1
- https://ubuntu.com/security/notices/USN-5208-1
- https://ubuntu.com/security/notices/USN-5218-1
- https://www.cve.org/CVERecord?id=CVE-2021-43267
- https://www.sentinelone.com/labs/tipc-remote-linux-kernel-heap-overflow-allows-arbitrary-code-execution/