#VU90299 Out-of-bounds read in Linux kernel - CVE-2021-47309
Published: May 31, 2024 / Updated: May 14, 2025
Vulnerability identifier: #VU90299
Vulnerability risk: Low
CVSSv4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2021-47309
CWE-ID: CWE-125
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerable software:
Linux kernel
Linux kernel
Software vendor:
Linux Foundation
Linux Foundation
Description
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to an out-of-bounds read error within the include/net/dst_metadata.h. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
External links
- https://git.kernel.org/stable/c/e7f3c9df40515a6c6b46f36c4c94cf48a043f887
- https://git.kernel.org/stable/c/b61d327cd3cc5ea591f3bf751dd11e034f388bb5
- https://git.kernel.org/stable/c/83bdcfbd968bcc91a0632b7b625e4a9b0cba5e0d
- https://git.kernel.org/stable/c/8bb1589c89e61e3b182dd546f1021928ebb5c2a6
- https://git.kernel.org/stable/c/8aa13a86964cdec4fd969ef677c6614ff068641a
- https://git.kernel.org/stable/c/2179d96ec702cc33ead02a9ce40ece599b8538c5
- https://git.kernel.org/stable/c/a915379594f1e045421635c6316d8f3ffa018c58
- https://git.kernel.org/stable/c/67a9c94317402b826fc3db32afc8f39336803d97
- https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.241
- https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.199
- https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.277
- https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.277
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.53
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.5
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.135