CVE-2021-4159
- State
- Published
- Severity
- Not scored
- Published
- Aug 24, 2022
- Updated
- Aug 3, 2024
- Reserved
- Dec 23, 2021
Description
A vulnerability was found in the Linux kernel's EBPF verifier when handling internal data structures. Internal memory locations could be returned to userspace. A local attacker with the permissions to insert eBPF code to the kernel can use this to leak internal kernel memory details defeating some of the exploit mitigations in place for the kernel.
Scores
The record has no CVSS score.
Weaknesses
- CWE-202 Exposure of Sensitive Information Through Data Queries
Affected Products
| Product | Versions |
|---|---|
kerneln/a |
|
References
- https://bugzilla.redhat.com/show_bug.cgi?id=2036024
- https://access.redhat.com/security/cve/CVE-2021-4159
- https://security-tracker.debian.org/tracker/CVE-2021-4159
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=294f2fc6da27620a506e6c050241655459ccd6bd
- [debian-lts-announce] 20221002 [SECURITY] [DLA 3131-1] linux security updatemailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.