CVE-2021-38207: Buffer Overflow
drivers/net/ethernet/xilinx/lltemacmain.c in the Linux kernel before 5.12.13 allows remote attackers to cause a denial of service (buffer overflow and lockup) by sending heavy network traffic for about ten minutes.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
Linux kernel (drivers/net/ethernet/xilinx/ll_temac_main.c)to a version that resolves this vulnerability.Fixed in 5.12.13
Event History
Frequently Asked Questions
What is the severity of CVE-2021-38207?
CVE-2021-38207 is classified as a denial of service vulnerability due to its potential to cause a buffer overflow and system lockup.
How do I fix CVE-2021-38207?
To fix CVE-2021-38207, you should upgrade your Linux kernel to version 5.12.13 or later.
What versions of the Linux kernel are affected by CVE-2021-38207?
CVE-2021-38207 affects Linux kernel versions prior to 5.12.13.
What can attackers do with CVE-2021-38207?
Attackers can exploit CVE-2021-38207 to send heavy network traffic that may result in denial of service.
Is CVE-2021-38207 specific to any Linux distributions?
While CVE-2021-38207 affects the Linux kernel, specific distributions, like those using versions below 5.12.13, are particularly vulnerable.