CVE-2021-47588: 
Linux Kernel vulnerability analysis and mitigation

In the Linux kernel, a vulnerability has been identified and resolved in the sit (Simple Internet Transition) module. The issue involves an incorrect call to ipip6_dev_free() from sit_init_net(), where ipip6_dev_free is already called by register_netdevice() if something goes wrong during device registration. This vulnerability was tracked as CVE-2021-47588 (Kernel Git).

The vulnerability stems from a double-free condition where ipip6_dev_free() is called redundantly. The function ipip6_dev_free is set as the sit dev->priv_destructor and is automatically called by register_netdevice() when device registration fails. The redundant call in sit_init_net() leads to a dst_release underflow warning, indicating potential memory corruption (Kernel Git).

When triggered, this vulnerability causes a dst_release underflow warning in the kernel, which could potentially lead to system instability. The issue manifests when network namespace operations are performed, specifically during the execution of the unshare syscall (Kernel Git).

The vulnerability was discovered and reported by syzbot, Google's kernel fuzzing bot. It can be triggered through normal system operations involving network namespace manipulation, specifically when the unshare syscall is used (Kernel Git).

The issue has been fixed by removing the redundant call to ipip6_dev_free() from sit_init_net(). The fix was implemented in the Linux kernel, addressing the root cause of the double-free condition. The patch ensures that the cleanup is handled properly by the register_netdevice() function's error path (Kernel Git).