Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A flaw was found in the Linux kernel in versions before 5.9-rc7. Traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt traffic for the specific UDP port used by the GENEVE tunnel allowing anyone between the two endpoints to read the traffic unencrypted. The main threat from this vulnerability is to data confidentiality.
CVSS Information
N/A
Vulnerability Type
敏感数据的明文传输
Vulnerability Title
Linux kernel 加密问题漏洞
Vulnerability Description
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。 Linux内核 5.9-rc7之前版本存在安全漏洞，该漏洞源于当IPsec被配置为加密由Geneve隧道使用的特定UDP端口的流量时，两个Geneve端点之间的流量可能是未加密的，允许这两个端点之间的任何人读取未加密的流量。这个漏洞的主要威胁是数据的机密性。
CVSS Information
N/A
Vulnerability Type
N/A