CVE-2021-47109

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-47109
In the Linux kernel, the following vulnerability has been resolved: neighbour: allow NUD_NOARP entries to be forced GCed IFF_POINTOPOINT interfaces use NUD_NOARP entries for IPv6. It's possible to fill up the neighbour table with enough entries that it will overflow for valid connections after that. This behaviour is more prevalent after commit 58956317c8de ("neighbor: Improve garbage collection") is applied, as it prevents removal from entries that are not NUD_FAILED, unless they are more than 5s old.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/7a6b1ab7475fd6478eeaf5c9d1163e7a18125c8f Patch
https://git.kernel.org/stable/c/d17d47da59f726dc4c87caebda3a50333d7e2fd3 Patch
https://git.kernel.org/stable/c/d99029e6aab62aef0a0251588b2867e77e83b137 Patch
https://git.kernel.org/stable/c/ddf088d7aaaaacfc836104f2e632b29b1d383cfc Patch
https://git.kernel.org/stable/c/7a6b1ab7475fd6478eeaf5c9d1163e7a18125c8f Patch
https://git.kernel.org/stable/c/d17d47da59f726dc4c87caebda3a50333d7e2fd3 Patch
https://git.kernel.org/stable/c/d99029e6aab62aef0a0251588b2867e77e83b137 Patch
https://git.kernel.org/stable/c/ddf088d7aaaaacfc836104f2e632b29b1d383cfc Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc6:*:*:*:*:*:*
History

27 Feb 2025, 03:20

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:5.13:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.13:rc6:*:*:*:*:*:*
First Time Linux linux Kernel
Linux
References () https://git.kernel.org/stable/c/7a6b1ab7475fd6478eeaf5c9d1163e7a18125c8f - () https://git.kernel.org/stable/c/7a6b1ab7475fd6478eeaf5c9d1163e7a18125c8f - Patch
References () https://git.kernel.org/stable/c/d17d47da59f726dc4c87caebda3a50333d7e2fd3 - () https://git.kernel.org/stable/c/d17d47da59f726dc4c87caebda3a50333d7e2fd3 - Patch
References () https://git.kernel.org/stable/c/d99029e6aab62aef0a0251588b2867e77e83b137 - () https://git.kernel.org/stable/c/d99029e6aab62aef0a0251588b2867e77e83b137 - Patch
References () https://git.kernel.org/stable/c/ddf088d7aaaaacfc836104f2e632b29b1d383cfc - () https://git.kernel.org/stable/c/ddf088d7aaaaacfc836104f2e632b29b1d383cfc - Patch
CWE CWE-190

21 Nov 2024, 06:35

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: vecino: permite forzar las entradas NUD_NOARP. Las interfaces GCed IFF_POINTOPOINT utilizan entradas NUD_NOARP para IPv6. Es posible llenar la tabla de vecinos con suficientes entradas para que después de eso se desborde de conexiones válidas. Este comportamiento es más frecuente después de aplicar el commit 58956317c8de ("vecino: mejorar la recolección de basura"), ya que evita la eliminación de entradas que no son NUD_FAILED, a menos que tengan más de 5 años de antigüedad.
References () https://git.kernel.org/stable/c/7a6b1ab7475fd6478eeaf5c9d1163e7a18125c8f - () https://git.kernel.org/stable/c/7a6b1ab7475fd6478eeaf5c9d1163e7a18125c8f -
References () https://git.kernel.org/stable/c/d17d47da59f726dc4c87caebda3a50333d7e2fd3 - () https://git.kernel.org/stable/c/d17d47da59f726dc4c87caebda3a50333d7e2fd3 -
References () https://git.kernel.org/stable/c/d99029e6aab62aef0a0251588b2867e77e83b137 - () https://git.kernel.org/stable/c/d99029e6aab62aef0a0251588b2867e77e83b137 -
References () https://git.kernel.org/stable/c/ddf088d7aaaaacfc836104f2e632b29b1d383cfc - () https://git.kernel.org/stable/c/ddf088d7aaaaacfc836104f2e632b29b1d383cfc -

15 Mar 2024, 21:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-03-15 21:15

Updated : 2025-02-27 03:20

NVD link : CVE-2021-47109

Mitre link : CVE-2021-47109

CVE.ORG link : CVE-2021-47109

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-190

Integer Overflow or Wraparound