CVE-2021-47099

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.16.0-rc5+

Description The vulnerability is related to the veth component of the Linux kernel, which fails to properly check for shared or cloned skbs when GRO is enabled on a veth device and TSO is disabled on the peer device. This can lead to a kernel bug and potentially cause a denial of service. The issue is addressed by skipping the GRO stage for shared or cloned skbs and trying to unclone the skbs before giving up.

Recommendations To resolve the issue, update the Linux kernel to a version that includes the fix for this vulnerability. Specifically, versions prior to 5.16.0-rc5+ are affected, so updating to 5.16.0-rc5+ or later should resolve the issue.

Note: The provided information does not specify the exact version that includes the fix, but it is clear that versions prior to 5.16.0-rc5+ are vulnerable.