[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2021-47293":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":19,"cwes":20,"cpes":21,"technologies":25,"references":27,"score":33,"epss_score":34,"epss_percentile":35,"is_kev":19,"cisa_kev_date_added":36,"cisa_kev_due_date":36,"cisa_ssvc":37,"attack_mappings":47,"exploits":54},272541,"CVE-2021-47293","EUVD-2021-34298","In the Linux kernel, the following vulnerability has been resolved:\n\nnet\u002Fsched: act_skbmod: Skip non-Ethernet packets\n\nCurrently tcf_skbmod_act() assumes that packets use Ethernet as their L2\nprotocol, which is not always the case.  As an example, for CAN devices:\n\n\t$ ip link add dev vcan0 type vcan\n\t$ ip link set up vcan0\n\t$ tc qdisc add dev vcan0 root handle 1: htb\n\t$ tc filter add dev vcan0 parent 1: protocol ip prio 10 \\\n\t\tmatchall action skbmod swap mac\n\nDoing the above silently corrupts all the packets.  Do not perform skbmod\nactions for non-Ethernet packets.","2024-05-21T15:15:00Z",{"cvss_v3.1":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":15,"userInteraction":17,"attackComplexity":18,"availabilityImpact":15,"privilegesRequired":18,"confidentialityImpact":15},"UNCHANGED","3.1",7.8,"LOCAL","HIGH","CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","NONE","LOW",false,[],[22,23,24],"cpe:2.3:o:linux:linux_kernel:5.14:rc2:*:*:*:*:*:*","cpe:2.3:o:linux:linux_kernel:5.14:rc1:*:*:*:*:*:*","cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",[26],"Linux Linux Kernel",[28,29,30,31,32],"https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002F071729150be9e1d1b851b70efb6d91ee9269d57b","https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002F34f1e1f657fae2891b485a3b2b95fe4d2aef9f0d","https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002F727d6a8b7ef3d25080fad228b2c4a1d4da5999c6","https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002Fa88414fb1117f2fe65fb88e45ba694e1d09d5024","https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002Fe4fdca366806f6bab374d1a95e626a10a3854b0c",0.39,0.00234,0.13552,null,{"timestamp":38,"automatable":39,"tech_impact":40,"exploitation":41,"cisa_decision":42,"cisa_remediation_timeline":46},"2024-05-28T19:25:44.173169Z","no","partial","none",{"vector":43,"decision":44,"priority":45},"CISAv1\u002FE:N\u002FA:N\u002FT:P\u002FM:H\u002F2026-10-25T09:47:05.441756\u002F","track_star","medium","60D",[48],{"name":49,"source":50,"tactics":51,"technique_id":53},"Exploitation for Privilege Escalation","attack_vector",[52],"privilege-escalation","T1068",[]]