QwikSec

Security Database

CVE

CWE

Training

CVE-2021-4159

Published: Aug 24, 2022

Modified: Aug 3, 2024

PUBLISHED

Description

A vulnerability was found in the Linux kernel's EBPF verifier when handling internal data structures. Internal memory locations could be returned to userspace. A local attacker with the permissions to insert eBPF code to the kernel can use this to leak internal kernel memory details defeating some of the exploit mitigations in place for the kernel.

Vendor	Product	Versions
n/a	kernel	affected `Fixed in v5.7-rc1`

Weaknesses (CWE)

References

https://bugzilla.redhat.com/show_bug.cgi?id=2036024

x_refsource_MISC

https://access.redhat.com/security/cve/CVE-2021-4159

x_refsource_MISC

https://security-tracker.debian.org/tracker/CVE-2021-4159

x_refsource_MISC

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=294f2fc6da27620a506e6c050241655459ccd6bd

x_refsource_MISC

[debian-lts-announce] 20221002 [SECURITY] [DLA 3131-1] linux security update

mailing-list

x_refsource_MLIST

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.