[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2021-47247":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T02:53:27.892Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":21,"duplicate_of":9,"upstream":22,"downstream":23,"duplicates":36,"related":37,"reserved_at":9,"published_at":41,"modified_at":42,"state":43,"summary":44,"references_raw":53,"kevs":74,"epss":75,"epss_history":78,"metrics":322,"affected":328},"CVE-2021-47247","In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: Fix use-after-free of encap entry in neigh update handler\n\nFunction mlx5e_rep_neigh_update() wasn't updated to accommodate rtnl lock\nremoval from TC filter update path and properly handle concurrent encap\nentry insertion/deletion which can lead to following use-after-free:\n\n [23827.464923] ==================================================================\n [23827.469446] BUG: KASAN: use-after-free in mlx5e_encap_take+0x72/0x140 [mlx5_core]\n [23827.470971] Read of size 4 at addr ffff8881d132228c by task kworker/u20:6/21635\n [23827.472251]\n [23827.472615] CPU: 9 PID: 21635 Comm: kworker/u20:6 Not tainted 5.13.0-rc3+ #5\n [23827.473788] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014\n [23827.475639] Workqueue: mlx5e mlx5e_rep_neigh_update [mlx5_core]\n [23827.476731] Call Trace:\n [23827.477260]  dump_stack+0xbb/0x107\n [23827.477906]  print_address_description.constprop.0+0x18/0x140\n [23827.478896]  ? mlx5e_encap_take+0x72/0x140 [mlx5_core]\n [23827.479879]  ? mlx5e_encap_take+0x72/0x140 [mlx5_core]\n [23827.480905]  kasan_report.cold+0x7c/0xd8\n [23827.481701]  ? mlx5e_encap_take+0x72/0x140 [mlx5_core]\n [23827.482744]  kasan_check_range+0x145/0x1a0\n [23827.493112]  mlx5e_encap_take+0x72/0x140 [mlx5_core]\n [23827.494054]  ? mlx5e_tc_tun_encap_info_equal_generic+0x140/0x140 [mlx5_core]\n [23827.495296]  mlx5e_rep_neigh_update+0x41e/0x5e0 [mlx5_core]\n [23827.496338]  ? mlx5e_rep_neigh_entry_release+0xb80/0xb80 [mlx5_core]\n [23827.497486]  ? read_word_at_a_time+0xe/0x20\n [23827.498250]  ? strscpy+0xa0/0x2a0\n [23827.498889]  process_one_work+0x8ac/0x14e0\n [23827.499638]  ? lockdep_hardirqs_on_prepare+0x400/0x400\n [23827.500537]  ? pwq_dec_nr_in_flight+0x2c0/0x2c0\n [23827.501359]  ? rwlock_bug.part.0+0x90/0x90\n [23827.502116]  worker_thread+0x53b/0x1220\n [23827.502831]  ? process_one_work+0x14e0/0x14e0\n [23827.503627]  kthread+0x328/0x3f0\n [23827.504254]  ? _raw_spin_unlock_irq+0x24/0x40\n [23827.505065]  ? __kthread_bind_mask+0x90/0x90\n [23827.505912]  ret_from_fork+0x1f/0x30\n [23827.506621]\n [23827.506987] Allocated by task 28248:\n [23827.507694]  kasan_save_stack+0x1b/0x40\n [23827.508476]  __kasan_kmalloc+0x7c/0x90\n [23827.509197]  mlx5e_attach_encap+0xde1/0x1d40 [mlx5_core]\n [23827.510194]  mlx5e_tc_add_fdb_flow+0x397/0xc40 [mlx5_core]\n [23827.511218]  __mlx5e_add_fdb_flow+0x519/0xb30 [mlx5_core]\n [23827.512234]  mlx5e_configure_flower+0x191c/0x4870 [mlx5_core]\n [23827.513298]  tc_setup_cb_add+0x1d5/0x420\n [23827.514023]  fl_hw_replace_filter+0x382/0x6a0 [cls_flower]\n [23827.514975]  fl_change+0x2ceb/0x4a51 [cls_flower]\n [23827.515821]  tc_new_tfilter+0x89a/0x2070\n [23827.516548]  rtnetlink_rcv_msg+0x644/0x8c0\n [23827.517300]  netlink_rcv_skb+0x11d/0x340\n [23827.518021]  netlink_unicast+0x42b/0x700\n [23827.518742]  netlink_sendmsg+0x743/0xc20\n [23827.519467]  sock_sendmsg+0xb2/0xe0\n [23827.520131]  ____sys_sendmsg+0x590/0x770\n [23827.520851]  ___sys_sendmsg+0xd8/0x160\n [23827.521552]  __sys_sendmsg+0xb7/0x140\n [23827.522238]  do_syscall_64+0x3a/0x70\n [23827.522907]  entry_SYSCALL_64_after_hwframe+0x44/0xae\n [23827.523797]\n [23827.524163] Freed by task 25948:\n [23827.524780]  kasan_save_stack+0x1b/0x40\n [23827.525488]  kasan_set_track+0x1c/0x30\n [23827.526187]  kasan_set_free_info+0x20/0x30\n [23827.526968]  __kasan_slab_free+0xed/0x130\n [23827.527709]  slab_free_freelist_hook+0xcf/0x1d0\n [23827.528528]  kmem_cache_free_bulk+0x33a/0x6e0\n [23827.529317]  kfree_rcu_work+0x55f/0xb70\n [23827.530024]  process_one_work+0x8ac/0x14e0\n [23827.530770]  worker_thread+0x53b/0x1220\n [23827.531480]  kthread+0x328/0x3f0\n [23827.532114]  ret_from_fork+0x1f/0x30\n [23827.532785]\n [23827.533147] Last potentially related work creation:\n [23827.534007]  kasan_save_stack+0x1b/0x40\n [23827.534710]  kasan_record_aux_stack+0xab/0xc0\n [23827.535492]  kvfree_call_rcu+0x31/0x7b0\n [23827.536206]  mlx5e_tc_del\n---truncated---",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-416","Use After Free","The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory \"belongs\" to the code that operates on the new pointer.","weakness","Stable","Variant","High",[],[],[],[],[24,26,28,30,32,34],{"_key":25},"SUSE-SU-2024:2362-1",{"_key":27},"SUSE-SU-2024:2365-1",{"_key":29},"SUSE-SU-2024:2384-1",{"_key":31},"DLA-4178-1",{"_key":33},"DEBIAN-CVE-2021-47247",{"_key":35},"UBUNTU-CVE-2021-47247",[],[38,39,40],{"_key":25},{"_key":27},{"_key":29},"2024-05-21T14:19:44.947Z","2026-05-11T13:50:48.355Z","Analyzed",{"cisa_kev":45,"cisa_ransomware":45,"cisa_vendor":9,"epss_severity":46,"epss_score":47,"severity":48,"severity_score":49,"severity_version":50,"severity_source":51,"severity_vector":52,"severity_status":43},false,"low",0.00013,"high",7.8,"v3.1","nvd","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",[54,60,64,68],{"url":55,"sources":56,"tags":58},"https://git.kernel.org/stable/c/0d1e7a7964ce6abb28883a3906bbc20fe0009f03",[57,51],"cve.org",[59],"Patch",{"url":61,"sources":62,"tags":63},"https://git.kernel.org/stable/c/b6447b72aca571632e71bb73a797118d5ce46a93",[57,51],[59],{"url":65,"sources":66,"tags":67},"https://git.kernel.org/stable/c/fb1a3132ee1ac968316e45d21a48703a6db0b6c3",[57,51],[59],{"url":69,"sources":70,"tags":71},"https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html",[57,51],[72,73],"Mailing List","Third Party Advisory",[],{"date":76,"score":47,"percentile":77},"2026-06-03",0.02058,[79,82,85,88,91,94,97,100,102,105,108,111,114,117,120,124,127,130,133,135,138,141,144,147,149,152,155,158,161,163,165,168,170,173,176,178,181,184,187,190,193,195,198,201,203,206,209,212,215,218,220,223,225,228,230,232,235,237,239,242,244,247,250,252,254,256,259,262,265,268,270,272,274,277,280,283,286,289,291,293,295,298,301,303,305,308,311,313,316,319],{"date":80,"score":47,"percentile":81},"2025-11-04",0.01371,{"date":83,"score":47,"percentile":84},"2025-11-05",0.01394,{"date":86,"score":47,"percentile":87},"2025-11-06",0.01412,{"date":89,"score":47,"percentile":90},"2025-11-07",0.01417,{"date":92,"score":47,"percentile":93},"2025-11-08",0.01421,{"date":95,"score":47,"percentile":96},"2025-11-09",0.01419,{"date":98,"score":47,"percentile":99},"2025-11-10",0.01401,{"date":101,"score":47,"percentile":87},"2025-11-11",{"date":103,"score":47,"percentile":104},"2025-11-12",0.01418,{"date":106,"score":47,"percentile":107},"2025-11-13",0.0143,{"date":109,"score":47,"percentile":110},"2025-11-14",0.01437,{"date":112,"score":47,"percentile":113},"2025-11-15",0.01458,{"date":115,"score":47,"percentile":116},"2025-11-16",0.01457,{"date":118,"score":47,"percentile":119},"2025-11-17",0.01447,{"date":121,"score":122,"percentile":123},"2025-11-18",0.00094,0.22639,{"date":125,"score":122,"percentile":126},"2025-11-19",0.2265,{"date":128,"score":122,"percentile":129},"2025-11-20",0.22657,{"date":131,"score":47,"percentile":132},"2025-11-21",0.01511,{"date":134,"score":47,"percentile":132},"2025-11-22",{"date":136,"score":47,"percentile":137},"2025-11-23",0.01497,{"date":139,"score":47,"percentile":140},"2025-11-24",0.01493,{"date":142,"score":47,"percentile":143},"2025-11-25",0.01479,{"date":145,"score":47,"percentile":146},"2025-11-26",0.01422,{"date":148,"score":47,"percentile":93},"2025-11-27",{"date":150,"score":47,"percentile":151},"2025-11-28",0.0142,{"date":153,"score":47,"percentile":154},"2025-11-29",0.01459,{"date":156,"score":47,"percentile":157},"2025-11-30",0.01469,{"date":159,"score":47,"percentile":160},"2025-12-01",0.01498,{"date":162,"score":47,"percentile":140},"2025-12-02",{"date":164,"score":47,"percentile":140},"2025-12-03",{"date":166,"score":47,"percentile":167},"2025-12-04",0.01467,{"date":169,"score":47,"percentile":143},"2025-12-05",{"date":171,"score":47,"percentile":172},"2025-12-06",0.01481,{"date":174,"score":47,"percentile":175},"2025-12-07",0.01475,{"date":177,"score":47,"percentile":175},"2025-12-08",{"date":179,"score":47,"percentile":180},"2025-12-09",0.0149,{"date":182,"score":47,"percentile":183},"2025-12-10",0.01504,{"date":185,"score":47,"percentile":186},"2025-12-11",0.015,{"date":188,"score":47,"percentile":189},"2025-12-12",0.01502,{"date":191,"score":47,"percentile":192},"2025-12-13",0.01486,{"date":194,"score":47,"percentile":143},"2025-12-14",{"date":196,"score":47,"percentile":197},"2025-12-15",0.01474,{"date":199,"score":47,"percentile":200},"2025-12-16",0.01483,{"date":202,"score":47,"percentile":180},"2025-12-17",{"date":204,"score":47,"percentile":205},"2025-12-18",0.01488,{"date":207,"score":47,"percentile":208},"2025-12-19",0.01494,{"date":210,"score":47,"percentile":211},"2025-12-20",0.01495,{"date":213,"score":47,"percentile":214},"2025-12-21",0.01505,{"date":216,"score":47,"percentile":217},"2025-12-22",0.01507,{"date":219,"score":47,"percentile":183},"2025-12-23",{"date":221,"score":47,"percentile":222},"2025-12-24",0.01506,{"date":224,"score":47,"percentile":132},"2025-12-25",{"date":226,"score":47,"percentile":227},"2025-12-26",0.01515,{"date":229,"score":47,"percentile":217},"2025-12-27",{"date":231,"score":47,"percentile":217},"2025-12-28",{"date":233,"score":47,"percentile":234},"2025-12-29",0.01499,{"date":236,"score":47,"percentile":140},"2025-12-30",{"date":238,"score":47,"percentile":180},"2025-12-31",{"date":240,"score":47,"percentile":241},"2026-01-01",0.01512,{"date":243,"score":47,"percentile":227},"2026-01-02",{"date":245,"score":47,"percentile":246},"2026-01-03",0.01518,{"date":248,"score":47,"percentile":249},"2026-01-04",0.01487,{"date":251,"score":47,"percentile":208},"2026-01-05",{"date":253,"score":47,"percentile":205},"2026-01-06",{"date":255,"score":47,"percentile":211},"2026-01-07",{"date":257,"score":47,"percentile":258},"2026-01-08",0.01509,{"date":260,"score":47,"percentile":261},"2026-01-09",0.01523,{"date":263,"score":47,"percentile":264},"2026-01-10",0.01534,{"date":266,"score":47,"percentile":267},"2026-01-11",0.01532,{"date":269,"score":47,"percentile":227},"2026-01-12",{"date":271,"score":47,"percentile":132},"2026-01-13",{"date":273,"score":47,"percentile":227},"2026-01-14",{"date":275,"score":47,"percentile":276},"2026-01-15",0.01526,{"date":278,"score":47,"percentile":279},"2026-01-16",0.01536,{"date":281,"score":47,"percentile":282},"2026-01-17",0.0154,{"date":284,"score":47,"percentile":285},"2026-01-18",0.01551,{"date":287,"score":47,"percentile":288},"2026-01-19",0.01541,{"date":290,"score":47,"percentile":276},"2026-01-20",{"date":292,"score":47,"percentile":246},"2026-01-21",{"date":294,"score":47,"percentile":246},"2026-01-22",{"date":296,"score":47,"percentile":297},"2026-01-23",0.01531,{"date":299,"score":47,"percentile":300},"2026-01-24",0.01537,{"date":302,"score":47,"percentile":300},"2026-01-25",{"date":304,"score":47,"percentile":264},"2026-01-26",{"date":306,"score":47,"percentile":307},"2026-01-27",0.01524,{"date":309,"score":47,"percentile":310},"2026-01-28",0.01519,{"date":312,"score":47,"percentile":264},"2026-01-29",{"date":314,"score":47,"percentile":315},"2026-01-30",0.01538,{"date":317,"score":47,"percentile":318},"2026-01-31",0.01556,{"date":320,"score":47,"percentile":321},"2026-02-01",0.01577,[323],{"source":51,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":324,"cvss_v4_0":9},{"baseScore":49,"baseSeverity":325,"vectorString":52,"impactScore":326,"exploitabilityScore":327},"HIGH",9.8,4.6,[329,338,358],{"ecosystem":9,"name":330,"vendor":331,"product":332,"cpe_part":333,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":334},"debian linux","debian","debian_linux","o",[335],{"version":336,"is_range":45,"range_type":337,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"11.0","cpe",{"ecosystem":9,"name":339,"vendor":340,"product":340,"cpe_part":341,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":342},"Linux","linux","a",[343,350,353,356],{"version":344,"is_range":345,"range_type":57,"version_start":346,"version_start_type":347,"version_end":348,"version_end_type":349,"fixed_in":9},">= 2a1f1768fa17805ca2e937e2e034a7c3433d3bdc, \u003C 0d1e7a7964ce6abb28883a3906bbc20fe0009f03",true,"2a1f1768fa17805ca2e937e2e034a7c3433d3bdc","including","0d1e7a7964ce6abb28883a3906bbc20fe0009f03","excluding",{"version":351,"is_range":345,"range_type":57,"version_start":346,"version_start_type":347,"version_end":352,"version_end_type":349,"fixed_in":9},">= 2a1f1768fa17805ca2e937e2e034a7c3433d3bdc, \u003C b6447b72aca571632e71bb73a797118d5ce46a93","b6447b72aca571632e71bb73a797118d5ce46a93",{"version":354,"is_range":345,"range_type":57,"version_start":346,"version_start_type":347,"version_end":355,"version_end_type":349,"fixed_in":9},">= 2a1f1768fa17805ca2e937e2e034a7c3433d3bdc, \u003C fb1a3132ee1ac968316e45d21a48703a6db0b6c3","fb1a3132ee1ac968316e45d21a48703a6db0b6c3",{"version":357,"is_range":45,"range_type":57,"version_start":357,"version_start_type":347,"version_end":357,"version_end_type":347,"fixed_in":9},"5.4",{"ecosystem":9,"name":359,"vendor":340,"product":360,"cpe_part":333,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":361},"linux kernel","linux_kernel",[362,365,369,371,373,375,377,379],{"version":363,"is_range":345,"range_type":337,"version_start":9,"version_start_type":9,"version_end":364,"version_end_type":349,"fixed_in":9},"lt5.10.237","5.10.237",{"version":366,"is_range":345,"range_type":337,"version_start":367,"version_start_type":347,"version_end":368,"version_end_type":349,"fixed_in":9},"gte5.11_lt5.12.13","5.11","5.12.13",{"version":370,"is_range":45,"range_type":337,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.13:rc1",{"version":372,"is_range":45,"range_type":337,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.13:rc2",{"version":374,"is_range":45,"range_type":337,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.13:rc3",{"version":376,"is_range":45,"range_type":337,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.13:rc4",{"version":378,"is_range":45,"range_type":337,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.13:rc5",{"version":380,"is_range":45,"range_type":337,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.13:rc6"]