7.8
High
CVE-2021-3600 It was discovered that the eBPF implementation in the Linux kernel did not properly track bounds information for 32…
Description
It was discovered that the eBPF implementation in the Linux kernel did not properly track bounds information for 32 bit registers when performing div and mod operations. A local attacker could use this to possibly execute arbitrary code.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| linux 5.11 | earliest → < 5.11 | 5.11 |
References
- cve.mitre.org cve.mitre.org
- ubuntu.com ubuntu.com
- git.kernel.org git.kernel.org
Timeline
- Published
- Last modified
Other CVEs of linux
The 7 CVEs of linux →
CVE-2023-6040
An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables:…
7.8
High
CVE-2023-1032
The Linux kernel io_uring IORING_OP_SOCKET operation contained a double free in function __sys_socket_file() in file…
4.7
Medium
CVE-2022-2602
io_uring UAF, Unix SCM garbage collection
5.3
Medium
CVE-2022-2588
It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the…
5.3
Medium