Linux Distros Unpatched Vulnerability : CVE-2021-47036

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - udp: skip L4 aggregation for UDP tunnel packets If NETIFFGROFRAGLIST or NETIFFGROUDPFWD are enabled, and there are UDP tunnels available in the system,...

CVE-2021-47036 udp: skip L4 aggregation for UDP tunnel packets

In the Linux kernel, the following vulnerability has been resolved: udp: skip L4 aggregation for UDP tunnel packets If NETIFFGROFRAGLIST or NETIFFGROUDPFWD are enabled, and there are UDP tunnels available in the system, udpgroreceive could end-up doing L4 aggregation either SKBGSOUDPL4 or...

CVE-2021-47036

CVE-2021-47036 affects the Linux kernel UDP GRO offload path. When NETIF_F_GRO_FRAGLIST or NETIF_F_GRO_UDP_FWD are enabled and UDP tunnels exist, udp_gro_receive() could perform L4 GRO aggregation at the outer UDP tunnel level, causing inner headers (e.g., VXLAN) to be corrupted and potentially m...