CVE-2021-3600
- State
- Published
- Severity
- 7.8 High
- Published
- Jan 8, 2024
- Updated
- Sep 4, 2024
- Reserved
- Jun 12, 2021
Description
It was discovered that the eBPF implementation in the Linux kernel did not properly track bounds information for 32 bit registers when performing div and mod operations. A local attacker could use this to possibly execute arbitrary code.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.8 High | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H | canonical |
| 3.1 | 7.8 High | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | CISA-ADP |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
linuxThe Linux Kernel Organization |
|
References
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3600issue-tracking
- https://ubuntu.com/security/notices/USN-5003-1third-party-advisory
- https://git.kernel.org/linus/e88b2c6e5a4d9ce30d75391e4d950da74bb2bd90issue-tracking
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.