Linux Distros Unpatched Vulnerability : CVE-2021-47036

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - udp: skip L4 aggregation for UDP tunnel packets If NETIFFGROFRAGLIST or NETIFFGROUDPFWD are enabled, and there are UDP tunnels available in the system,...

CVE-2021-47036 udp: skip L4 aggregation for UDP tunnel packets

In the Linux kernel, the following vulnerability has been resolved: udp: skip L4 aggregation for UDP tunnel packets If NETIFFGROFRAGLIST or NETIFFGROUDPFWD are enabled, and there are UDP tunnels available in the system, udpgroreceive could end-up doing L4 aggregation either SKBGSOUDPL4 or...

CVE-2021-47036

CVE-2021-47036 concerns the Linux kernel UDP GRO path when NETIF_F_GRO_FRAGLIST or NETIF_F_GRO_UDP_FWD are enabled and UDP tunnels exist. The bug could allow udp_gro_receive() to perform L4 GRO aggregation (SKB_GSO_UDP_L4 or SKB_GSO_FRAGLIST) at the outer UDP tunnel level for packets that carry a...