{
  "cveId": "CVE-2021-47309",
  "url": "https://patchblox.com/security/cve/CVE-2021-47309",
  "summary": "CVE-2021-47309 is fixed in linux on 1 platform, first by DEBIAN-CVE-2021-47309, released May 21, 2024. It is not reported as exploited. Patch Radar priority: High.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net: validate lwtstate-\u003Edata before returning fr...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  net: validate lwtstate-\u003Edata before returning from skb_tunnel_info()  skb_tunnel_info() returns pointer of lwtstate-\u003Edata as ip_tunnel_info type without validation. lwtstate-\u003Edata can have various types such as mpls_iptunnel_encap, etc and these are not compatible. So skb_tunnel_info() should validate before returning that pointer.  Splat looks like: BUG: KASAN: slab-out-of-bounds in vxlan_get_route\u002B0x418/0x4b0 [vxlan] Read of size 2 at addr ffff888106ec2698 by task ping/811  CPU: 1 PID: 811 Comm: ping Not tainted 5.13.0\u002B #1195 Call Trace:  dump_stack_lvl\u002B0x56/0x7b  print_address_description.constprop.8.cold.13\u002B0x13/0x2ee  ? vxlan_get_route\u002B0x418/0x4b0 [vxlan]  ? vxlan_get_route\u002B0x418/0x4b0 [vxlan]  kasan_report.cold.14\u002B0x83/0xdf  ? vxlan_get_route\u002B0x418/0x4b0 [vxlan]  vxlan_get_route\u002B0x418/0x4b0 [vxlan]  [ ... ]  vxlan_xmit_one\u002B0x148b/0x32b0 [vxlan]  [ ... ]  vxlan_xmit\u002B0x25c5/0x4780 [vxlan]  [ ... ]  dev_hard_start_xmit\u002B0x1ae/0x6e0  __dev_queue_xmit\u002B0x1f39/0x31a0  [ ... ]  neigh_xmit\u002B0x2f9/0x940  mpls_xmit\u002B0x911/0x1600 [mpls_iptunnel]  lwtunnel_xmit\u002B0x18f/0x450  ip_finish_output2\u002B0x867/0x2040  [ ... ]",
  "published": "2024-05-21T15:15:18Z",
  "severity": "high",
  "cvss": 7.1,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
  "epss": 0.0025,
  "epssPercentile": 0.16445,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "5.14.6-1",
      "fix": "DEBIAN-CVE-2021-47309",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2021-47309",
      "released": "2024-05-21T15:15:18Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "5.14.6-1",
      "fix": "DEBIAN-CVE-2021-47309",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2021-47309",
      "released": "2024-05-21T15:15:18Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "5.14.6-1",
      "fix": "DEBIAN-CVE-2021-47309",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2021-47309",
      "released": "2024-05-21T15:15:18Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T19:12:23Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}