CVE-2021-38166

01/תיאור (מקור, אנגלית)

In kernel/bpf/hashtab.c in the Linux kernel through 5.13.8, there is an integer overflow and out-of-bounds write when many elements are placed in a single bucket. NOTE: exploitation might be impractical without the CAP_SYS_ADMIN capability.

02/מוצרים מושפעים

linux: linux kernel; fedoraproject: fedora; debian: debian linux

03/קישורים10

• git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf.git/commit/?id‮… PatchVendor Advisory
• git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf.git/commit/?id‮… PatchVendor Advisory
• lore.kernel.org/bpf/20210806150419.109658-1-th.yasumatsu%40gma‮… Patch
• lore.kernel.org/bpf/20210806150419.109658-1-th.yasumatsu%40gma‮… Patch
• lists.fedoraproject.org/archives/list/package-announce%40lists‮… Third Party Advisory
• lists.fedoraproject.org/archives/list/package-announce%40lists‮… Third Party Advisory
• security.netapp.com/advisory/ntap-20210909-0001/ Third Party Advisory
• www.debian.org/security/2021/dsa-4978 Third Party Advisory
• lists.fedoraproject.org/archives/list/package-announce%40lists‮… Third Party Advisory
• lists.fedoraproject.org/archives/list/package-announce%40lists‮… Third Party Advisory