CVE - CVE-2021-47160

CVE-ID
CVE-2021-47160	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: net: dsa: mt7530: fix VLAN traffic leaks PCR_MATRIX field was set to all 1's when VLAN filtering is enabled, but was not reset when it is disabled, which may cause traffic leaks: ip link add br0 type bridge vlan_filtering 1 ip link add br1 type bridge vlan_filtering 1 ip link set swp0 master br0 ip link set swp1 master br1 ip link set br0 type bridge vlan_filtering 0 ip link set br1 type bridge vlan_filtering 0 # traffic in br0 and br1 will start leaking to each other As port_bridge_{add,del} have set up PCR_MATRIX properly, remove the PCR_MATRIX write from mt7530_port_set_vlan_aware.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/474a2ddaa192777522a7499784f1d60691cd831a URL:https://git.kernel.org/stable/c/474a2ddaa192777522a7499784f1d60691cd831a MISC:https://git.kernel.org/stable/c/4fe4e1f48ba119bdbc7c897c83b04ba0d08f5488 URL:https://git.kernel.org/stable/c/4fe4e1f48ba119bdbc7c897c83b04ba0d08f5488 MISC:https://git.kernel.org/stable/c/82ae35b6c14feae5f216913d5b433e143c756d4e URL:https://git.kernel.org/stable/c/82ae35b6c14feae5f216913d5b433e143c756d4e MISC:https://git.kernel.org/stable/c/ae389812733b1b1e8e07fcc238e41db166b5c78d URL:https://git.kernel.org/stable/c/ae389812733b1b1e8e07fcc238e41db166b5c78d MISC:https://git.kernel.org/stable/c/b91117b66fe875723a4e79ec6263526fffdb44d2 URL:https://git.kernel.org/stable/c/b91117b66fe875723a4e79ec6263526fffdb44d2
Assigning CNA
kernel.org
Date Record Created
20240325	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240325)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)