Riskcovery

CVE-2021-47160

net: dsa: mt7530: fix VLAN traffic leaks

State
Published
Severity
8.1 High
Published
Mar 25, 2024
Updated
Aug 5, 2026
Reserved
Mar 25, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net: dsa: mt7530: fix VLAN traffic leaks

PCR_MATRIX field was set to all 1's when VLAN filtering is enabled, but was not reset when it is disabled, which may cause traffic leaks:

ip link add br0 type bridge vlan_filtering 1 ip link add br1 type bridge vlan_filtering 1 ip link set swp0 master br0 ip link set swp1 master br1 ip link set br0 type bridge vlan_filtering 0 ip link set br1 type bridge vlan_filtering 0 # traffic in br0 and br1 will start leaking to each other

As port_bridge_{add,del} have set up PCR_MATRIX properly, remove the PCR_MATRIX write from mt7530_port_set_vlan_aware.

Scores

CVSSScoreVectorSource
3.18.1 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:NLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 83163f7dca5684816d01c8ccf4857aa74801e7b7 to before ae389812733b1b1e8e07fcc238e41db166b5c78dAffected
  • 83163f7dca5684816d01c8ccf4857aa74801e7b7 to before 4fe4e1f48ba119bdbc7c897c83b04ba0d08f5488Affected
  • 83163f7dca5684816d01c8ccf4857aa74801e7b7 to before b91117b66fe875723a4e79ec6263526fffdb44d2Affected
  • 83163f7dca5684816d01c8ccf4857aa74801e7b7 to before 82ae35b6c14feae5f216913d5b433e143c756d4eAffected
  • 83163f7dca5684816d01c8ccf4857aa74801e7b7 to before 474a2ddaa192777522a7499784f1d60691cd831aAffected
LinuxLinux
  • 4.16Affected
  • before 4.16Not affected
  • 4.19.193 through 4.19.*Not affected
  • 5.4.124 through 5.4.*Not affected
  • 5.10.42 through 5.10.*Not affected
  • 5.12.9 through 5.12.*Not affected
  • 5.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.