CVE-2021-41864

תיאור (מקור, אנגלית)

prealloc_elems_and_freelist in kernel/bpf/stackmap.c in the Linux kernel before 5.14.12 allows unprivileged users to trigger an eBPF multiplication integer overflow with a resultant out-of-bounds write.

מדדים

CVSS 3.1

7.8 (HIGH) מקור הציון: NVD CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS — סבירות ניצול

0% (אחוזון 000) נכון ל-19/8/2026

CWE

CWE-190

מוצרים מושפעים

linux: linux kernel; fedoraproject: fedora; netapp: cloud backup; netapp: hci management node; netapp: solidfire; netapp: h410c firmware; netapp: h410c; netapp: h300s firmware; netapp: h300s; netapp: h500s firmware; netapp: h500s; netapp: h700s firmware; netapp: h700s; netapp: h300e firmware; netapp: h300e

קישורים

• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.12 Mailing ListPatchVendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf.git/commit/?id=30e29a9‮… Mailing ListPatchVendor Advisory
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.12 Mailing ListPatchVendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf.git/commit/?id=30e29a9‮… Mailing ListPatchVendor Advisory
• https://github.com/torvalds/linux/commit/30e29a9a2bc6a4888335a6ede968b75cd3296‮… PatchThird Party Advisory
• https://github.com/torvalds/linux/commit/30e29a9a2bc6a4888335a6ede968b75cd3296‮… PatchThird Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/12/msg00012.html Mailing ListThird Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html Mailing ListThird Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorap‮… Broken Link
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorap‮… Broken Link