CVE & CISA-KEV Catalog

CVE-2021-47293

HIGH
7.8
CVSS v3
NVD

Description

In the Linux kernel, the following vulnerability has been resolved: net/sched: act_skbmod: Skip non-Ethernet packets Currently tcf_skbmod_act() assumes that packets use Ethernet as their L2 protocol, which is not always the case. As an example, for CAN devices: $ ip link add dev vcan0 type vcan $ ip link set up vcan0 $ tc qdisc add dev vcan0 root handle 1: htb $ tc filter add dev vcan0 parent 1: protocol ip prio 10 \ matchall action skbmod swap mac Doing the above silently corrupts all the packets. Do not perform skbmod actions for non-Ethernet packets.

How to fix

Remediation Available
linuxDebian
Fixed in:5.10.70-1CVE-2021-47293
Fixed in:5.14.6-1CVE-2021-47293
Fixed in:5.14.6-1CVE-2021-47293
Fixed in:5.14.6-1CVE-2021-47293
bpftoolRed Hat / RHEL
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
bpftoolRocky
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
bpftool-debuginfoRed Hat / RHEL
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
bpftool-debuginfoRocky
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
kernelRocky
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
kernelRed Hat / RHEL
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
kernel-abi-stablelistsRed Hat / RHEL
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
kernel-abi-stablelistsRocky
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
kernel-coreRocky
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
kernel-coreRed Hat / RHEL
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
kernel-debugRed Hat / RHEL
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
kernel-debugRocky
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
kernel-debug-coreRocky
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
kernel-debug-coreRed Hat / RHEL
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
kernel-debug-debuginfoRocky
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
kernel-debug-debuginfoRed Hat / RHEL
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
kernel-debug-develRocky
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
kernel-debug-develRed Hat / RHEL
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
kernel-debug-modulesRocky
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
kernel-debug-modulesRed Hat / RHEL
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
kernel-debug-modules-extraRed Hat / RHEL
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
kernel-debug-modules-extraRocky
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
kernel-debuginfoRocky
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
kernel-debuginfoRed Hat / RHEL
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
kernel-debuginfo-common-aarch64Red Hat / RHEL
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
kernel-debuginfo-common-aarch64Rocky
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
kernel-debuginfo-common-ppc64leRed Hat / RHEL
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
kernel-debuginfo-common-ppc64leRocky
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
kernel-debuginfo-common-s390xRocky
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
kernel-debuginfo-common-s390xRed Hat / RHEL
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
kernel-debuginfo-common-x86_64Rocky
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
kernel-debuginfo-common-x86_64Red Hat / RHEL
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
kernel-develRed Hat / RHEL
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
kernel-develRocky
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
kernel-docRocky
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
kernel-docRed Hat / RHEL
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
kernel-modulesRed Hat / RHEL
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
kernel-modulesRocky
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
kernel-modules-extraRed Hat / RHEL
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
kernel-modules-extraRocky
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
kernel-toolsRed Hat / RHEL
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
kernel-toolsRocky
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
kernel-tools-debuginfoRocky
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
kernel-tools-debuginfoRed Hat / RHEL
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
kernel-tools-libsRocky
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
kernel-tools-libsRed Hat / RHEL
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
kernel-zfcpdumpRed Hat / RHEL
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
kernel-zfcpdumpRocky
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
kernel-zfcpdump-coreRocky
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
kernel-zfcpdump-coreRed Hat / RHEL
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
kernel-zfcpdump-debuginfoRed Hat / RHEL
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
kernel-zfcpdump-debuginfoRocky
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
kernel-zfcpdump-develRed Hat / RHEL
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
kernel-zfcpdump-develRocky
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
kernel-zfcpdump-modulesRed Hat / RHEL
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
kernel-zfcpdump-modulesRocky
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
kernel-zfcpdump-modules-extraRed Hat / RHEL
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
kernel-zfcpdump-modules-extraRocky
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
perfRocky
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
perfRed Hat / RHEL
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
perf-debuginfoRed Hat / RHEL
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
perf-debuginfoRocky
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
python3-perfRocky
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
python3-perfRed Hat / RHEL
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
python3-perf-debuginfoRocky
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
python3-perf-debuginfoRed Hat / RHEL
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447
Fixed in:0:4.18.0-372.111.1.el8_6RHSA-2024:4447

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorLocal
Attack ComplexityLow
Privileges RequiredLow
User InteractionNone
ScopeUnchanged

Impact

ConfidentialityHigh
IntegrityHigh
AvailabilityHigh

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploit Intelligence

0.23%probability of exploitation in 30 days
14thpercentile

Low risk: more likely to be exploited than 14% of all known CVEs.

References

Embed a live status badge for CVE-2021-47293
CVE-2021-47293 severity badge

Markdown

[![CVE-2021-47293](https://tridentstack.com/cve/badge/CVE-2021-47293.svg)](https://tridentstack.com/cve/CVE-2021-47293)

HTML

<a href="https://tridentstack.com/cve/CVE-2021-47293"><img src="https://tridentstack.com/cve/badge/CVE-2021-47293.svg" alt="CVE-2021-47293"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

Start free

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2025-05-07.