Description (CNA)
It was discovered that the eBPF implementation in the Linux kernel did not properly track bounds information for 32 bit registers when performing div and mod operations. A local attacker could use this to possibly execute arbitrary code.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| The Linux Kernel Organization / linux | affected 0 before 5.11 |
CWE
No CWE identifiers supplied.
References
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3600
- https://ubuntu.com/security/notices/USN-5003-1
- https://git.kernel.org/linus/e88b2c6e5a4d9ce30d75391e4d950da74bb2bd90
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.