A vulnerability classified as critical has been found in Linux Kernel up to 4.14.258/4.19.221/5.4.167/5.10.87/5.15.10. Affected is the function ipip6_dev_free of the file net/core/dst.c. The manipulation leads to buffer underwrite.

This vulnerability is traded as CVE-2021-47588. Access to the local network is required for this attack. There is no exploit available.

It is recommended to upgrade the affected component.