High severity7.8NVD Advisory· Published May 21, 2024· Updated Jun 17, 2026
CVE-2021-47293
CVE-2021-47293
Description
In the Linux kernel, the following vulnerability has been resolved:
net/sched: act_skbmod: Skip non-Ethernet packets
Currently tcf_skbmod_act() assumes that packets use Ethernet as their L2 protocol, which is not always the case. As an example, for CAN devices:
$ ip link add dev vcan0 type vcan $ ip link set up vcan0 $ tc qdisc add dev vcan0 root handle 1: htb $ tc filter add dev vcan0 parent 1: protocol ip prio 10 \ matchall action skbmod swap mac
Doing the above silently corrupts all the packets. Do not perform skbmod actions for non-Ethernet packets.
Affected products
24- osv-coords22 versionspkg:rpm/suse/kernel-azure&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5pkg:rpm/suse/kernel-azure&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2012%20SP5pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012%20SP5pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP5pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5pkg:rpm/suse/kernel-rt_debug&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2012%20SP5pkg:rpm/suse/kernel-rt&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2012%20SP5pkg:rpm/suse/kernel-source-azure&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5pkg:rpm/suse/kernel-source-azure&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5pkg:rpm/suse/kernel-source-rt&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2012%20SP5pkg:rpm/suse/kernel-syms-azure&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5pkg:rpm/suse/kernel-syms-azure&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5pkg:rpm/suse/kernel-syms-rt&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2012%20SP5pkg:rpm/suse/kgraft-patch-SLE12-SP5_Update_58&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012%20SP5
< 4.12.14-16.191.1+ 21 more
- (no CPE)range: < 4.12.14-16.191.1
- (no CPE)range: < 4.12.14-16.191.1
- (no CPE)range: < 4.12.14-122.222.1
- (no CPE)range: < 4.12.14-122.222.1
- (no CPE)range: < 4.12.14-122.222.1
- (no CPE)range: < 4.12.14-122.222.1
- (no CPE)range: < 4.12.14-122.222.1
- (no CPE)range: < 4.12.14-122.222.1
- (no CPE)range: < 4.12.14-122.222.1
- (no CPE)range: < 4.12.14-10.191.1
- (no CPE)range: < 4.12.14-10.191.1
- (no CPE)range: < 4.12.14-16.191.1
- (no CPE)range: < 4.12.14-16.191.1
- (no CPE)range: < 4.12.14-122.222.1
- (no CPE)range: < 4.12.14-122.222.1
- (no CPE)range: < 4.12.14-10.191.1
- (no CPE)range: < 4.12.14-16.191.1
- (no CPE)range: < 4.12.14-16.191.1
- (no CPE)range: < 4.12.14-122.222.1
- (no CPE)range: < 4.12.14-122.222.1
- (no CPE)range: < 4.12.14-10.191.1
- (no CPE)range: < 1-8.3.1
Patches
Vulnerability mechanics
References
5- git.kernel.org/stable/c/071729150be9e1d1b851b70efb6d91ee9269d57bnvdPatch
- git.kernel.org/stable/c/34f1e1f657fae2891b485a3b2b95fe4d2aef9f0dnvdPatch
- git.kernel.org/stable/c/727d6a8b7ef3d25080fad228b2c4a1d4da5999c6nvdPatch
- git.kernel.org/stable/c/a88414fb1117f2fe65fb88e45ba694e1d09d5024nvdPatch
- git.kernel.org/stable/c/e4fdca366806f6bab374d1a95e626a10a3854b0cnvdPatch
News mentions
0No linked articles in our index yet.