Skip to content
Not rated

CVE-2021-4001 A race condition was found in the Linux kernel's ebpf verifier between bpf_map_update_elem and bpf_map_freeze due to a…

Description

A race condition was found in the Linux kernel's ebpf verifier between bpf_map_update_elem and bpf_map_freeze due to a missing lock in kernel/bpf/syscall.c. In this flaw, a local user with a special privilege (cap_sys_admin or cap_bpf) can modify the frozen mapped address space. This flaw affects kernel versions prior to 5.16 rc2.

Affected products and versions

Product Affected versions Fixed in
kernel Versions not published

References

Timeline

  1. Published
  2. Last modified
The 279 CVEs of kernel →
Track this CVE