CVE-2021-41864

EPSS 0.41%
Veröffentlicht 02.10.2021 00:15:07
Zuletzt bearbeitet 05.08.2026 18:44:49
Erkennungen
Login

prealloc_elems_and_freelist in kernel/bpf/stackmap.c in the Linux kernel before 5.14.12 allows unprivileged users to trigger an eBPF multiplication integer overflow with a resultant out-of-bounds write.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 13

NVD 23 VulnDex Vulnerability Enrichment 8

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Linux ≫ Linux Kernel Version >= 4.6 < 4.9.287

Linux ≫ Linux Kernel Version >= 4.10 < 4.14.251

Linux ≫ Linux Kernel Version >= 4.15 < 4.19.211

Linux ≫ Linux Kernel Version >= 4.20 < 5.4.153

Linux ≫ Linux Kernel Version >= 5.5 < 5.10.73

Linux ≫ Linux Kernel Version >= 5.11 < 5.14.12

Fedoraproject ≫ Fedora Version 33

Fedoraproject ≫ Fedora Version 34

Fedoraproject ≫ Fedora Version 35

Netapp ≫ Cloud Backup Version -

Netapp ≫ Hci Management Node Version -

Netapp ≫ Solidfire Version -

Netapp ≫ H410c Firmware Version -

Netapp ≫ H410c Version -

Netapp ≫ H300s Firmware Version -

Netapp ≫ H300s Version -

Netapp ≫ H500s Firmware Version -

Netapp ≫ H500s Version -

Netapp ≫ H700s Firmware Version -

Netapp ≫ H700s Version -

Netapp ≫ H300e Firmware Version -

Netapp ≫ H300e Version -

Netapp ≫ H500e Firmware Version -

Netapp ≫ H500e Version -

Netapp ≫ H700e Firmware Version -

Netapp ≫ H700e Version -

Netapp ≫ H410s Firmware Version -

Netapp ≫ H410s Version -

Netapp ≫ Solidfire Baseboard Management Controller Firmware Version -

Netapp ≫ Solidfire Baseboard Management Controller Version -

Debian ≫ Debian Linux Version 9.0

Debian ≫ Debian Linux Version 10.0

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.41%	0.335

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST	4.6	3.9	6.4	AV:L/AC:L/Au:N/C:P/I:P/A:P

CWE-190 Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

https://lists.debian.org/debian-lts-announce/2021/12/msg00012.html

Third Party Advisory

Mailing List

https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html

Third Party Advisory

Mailing List

https://www.debian.org/security/2022/dsa-5096

Third Party Advisory

https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf.git/commit/?id=30e29a9a2bc6a4888335a6ede968b75cd329657a

Patch

Vendor Advisory

Mailing List

https://github.com/torvalds/linux/commit/30e29a9a2bc6a4888335a6ede968b75cd329657a

Patch

Third Party Advisory

https://security.netapp.com/advisory/ntap-20211029-0004/

Third Party Advisory

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.12

Patch

Vendor Advisory

Mailing List

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7BLLVKYAIETEORUPTFO3TR3C33ZPFXQM/

Broken Link

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LAT3RERO6QBKSPJBNNRWY3D4NCGTFOS7/

Broken Link

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SYKURLXBB2555ASWMPDNMBUPD6AG2JKQ/

Broken Link

https://nvd.nist.gov/vuln/detail/CVE-2021-41864

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2021-41864

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2021-41864

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2021-41864