Lucene search
HistoryJan 08, 2024 - 7:15 p.m.
CVE-2021-3600
ebpf
linux kernel
vulnerability
div
mod
arbitrary code
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
7.6
Confidence
High
EPSS
0
Percentile
5.1%
It was discovered that the eBPF implementation in the Linux kernel did not properly track bounds information for 32 bit registers when performing div and mod operations. A local attacker could use this to possibly execute arbitrary code.
Affected configurations
Node
linuxlinux_kernelRange4.14.115–4.14.308
ORlinuxlinux_kernelRange4.15–4.19.206
ORlinuxlinux_kernelRange4.20–5.4.98
ORlinuxlinux_kernelRange5.5–5.10.16
ORlinuxlinux_kernelMatch5.11rc1
ORlinuxlinux_kernelMatch5.11rc2
ORlinuxlinux_kernelMatch5.11rc3
ORlinuxlinux_kernelMatch5.11rc4
ORlinuxlinux_kernelMatch5.11rc5
ORlinuxlinux_kernelMatch5.11rc6
ORlinuxlinux_kernelMatch5.11rc7
Node
canonicalubuntu_linuxMatch14.04esm
ORcanonicalubuntu_linuxMatch16.04esm
ORcanonicalubuntu_linuxMatch18.04esm
Node
fedoraprojectfedoraMatch34
Node
redhatenterprise_linuxMatch8.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| linux | linux_kernel | * | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| linux | linux_kernel | 5.11 | cpe:2.3:o:linux:linux_kernel:5.11:rc1:*:*:*:*:*:* |
| linux | linux_kernel | 5.11 | cpe:2.3:o:linux:linux_kernel:5.11:rc2:*:*:*:*:*:* |
| linux | linux_kernel | 5.11 | cpe:2.3:o:linux:linux_kernel:5.11:rc3:*:*:*:*:*:* |
| linux | linux_kernel | 5.11 | cpe:2.3:o:linux:linux_kernel:5.11:rc4:*:*:*:*:*:* |
| linux | linux_kernel | 5.11 | cpe:2.3:o:linux:linux_kernel:5.11:rc5:*:*:*:*:*:* |
| linux | linux_kernel | 5.11 | cpe:2.3:o:linux:linux_kernel:5.11:rc6:*:*:*:*:*:* |
| linux | linux_kernel | 5.11 | cpe:2.3:o:linux:linux_kernel:5.11:rc7:*:*:*:*:*:* |
| canonical | ubuntu_linux | 14.04 | cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:* |
| canonical | ubuntu_linux | 16.04 | cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:* |
Related
prion
prion
Out-of-bounds
2024-01-08 19:15:00
cve
cve
CVE-2021-3600
2024-01-08 19:15:08
redhatcve
redhatcve
CVE-2021-3600
2021-07-13 19:25:45
vulnrichment
vulnrichment
CVE-2021-3600
2024-01-08 18:16:42
debiancve
debiancve
CVE-2021-3600
2024-01-08 19:15:08
cnvd
cnvd
Linux Kernel Code Execution Vulnerability
2021-06-24 00:00:00
cvelist
cvelist
CVE-2021-3600
2024-01-08 18:16:42
ubuntu
ubuntu
Kernel Live Patch Security Notice
2021-07-26 00:00:00
Linux kernel vulnerabilities
2021-06-23 00:00:00
ubuntucve
ubuntucve
CVE-2021-3600
2021-06-22 00:00:00
nessus
nessus
Ubuntu 16.04 ESM / 18.04 LTS : Linux kernel vulnerabilities (USN-5003-1)
2021-06-23 00:00:00
Rocky Linux 8 : kernel-rt (RLSA-2021:4140)
2022-02-09 00:00:00
Rocky Linux 8 : kernel (RLSA-2021:4356)
2022-02-09 00:00:00
osv
osv
linux-4.19 - security update
2021-10-12 00:00:00
Moderate: kernel security, bug fix, and enhancement update
2021-11-09 09:08:02
openvas
openvas
Ubuntu: Security Advisory (USN-5003-1)
2021-06-24 00:00:00
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2021-2465)
2021-09-24 00:00:00
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2021-2554)
2021-09-28 00:00:00
rocky
rocky
kernel security, bug fix, and enhancement update
2021-11-16 07:31:29
kernel-rt security and bug fix update
2021-11-16 07:35:09
debian
debian
[SECURITY] [DLA 2785-1] linux-4.19 security update
2021-10-15 21:50:44
redos
redos
ROS-20220919-01
2022-09-19 00:00:00
oraclelinux
oraclelinux
kernel security, bug fix, and enhancement update
2021-11-16 00:00:00
almalinux
almalinux
Moderate: kernel security, bug fix, and enhancement update
2021-11-09 09:08:02
redhat
redhat
(RHSA-2021:4140) Moderate: kernel-rt security and bug fix update
2021-11-09 08:21:02
(RHSA-2021:4356) Moderate: kernel security, bug fix, and enhancement update
2021-11-09 09:08:02
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
7.6
Confidence
High
EPSS
0
Percentile
5.1%
Related for NVD:CVE-2021-3600