CVE-2021-47109

CVE-2021-47109 concerns the Linux kernel neighbour GC: on IPv6, NUD_NOARP entries can be GCed, potentially overflowing the neighbour table for valid connections. The description notes the issue is more prevalent after the patch with commit 58956317c8de (“neighbor: Improve garbage collection”), wh...

CVE-2021-47109 neighbour: allow NUD_NOARP entries to be forced GCed

In the Linux kernel, the following vulnerability has been resolved: neighbour: allow NUDNOARP entries to be forced GCed IFFPOINTOPOINT interfaces use NUDNOARP entries for IPv6. It's possible to fill up the neighbour table with enough entries that it will overflow for valid connections after that...