Integer overflow in Linux
CVE-2021-47109
In the Linux kernel, the following vulnerability has been resolved: neighbour: allow NUD_NOARP entries to be forced GCed IFF_POINTOPOINT interfaces use NUD_NOARP entries for IPv6. It's possible to fill up the neighbour table with enough entries that it will overflow for valid connections after that. This behaviour is more prevalent after commit 58956317c8de ("neighbor: Improve garbage collection") is applied, as it prevents removal from entries that are not NUD_FAILED, unless they are more than 5s old.
Vulnerability class: Integer Overflow
EPSS: 0.002 (14.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Linux — versions 58956317c8de52009d1a38a721474c24aef74fe7, 5.0, 0
- Linux Linux_kernel — versions 5.13
Weakness classification (CWE)
Public proof-of-concept exploits
References
Frequently asked questions
- What is CVE-2021-47109?
- CVE-2021-47109 is a high-severity vulnerability in Linux, classified under Integer Overflow or Wraparound. CVSS score: 7.5/10. Published 2024-03-15.
- How severe is CVE-2021-47109?
- High severity. CVSS v3 base score is 7.5 out of 10.
- Is CVE-2021-47109 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.