CVE-2021-31440
Public on 2021-05-21
Modified on 2022-01-10
Description
An out-of-bounds access flaw was found in the Linux kernel's implementation of the eBPF code verifier, where an incorrect register bounds calculation while checking unsigned 32-bit instructions in an eBPF program occurs.. By default accessing the eBPF verifier is only accessible to privileged users with CAP_SYS_ADMIN. The issue results from the lack of proper validation of user-supplied eBPF programs prior to executing them. A local user could use this flaw to crash the system or possibly escalate their privileges on the system.
CVSS v3 Base Score
See breakdown
