PT-2020-5729 · Linux+3 · Linux Kernel+3

Guilherme De Almeida Suckevicz

·

Published

2020-09-08

·

Updated

2021-05-28

·

CVE-2021-3411

CVSS v3.1

6.7

Medium

VectorAV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.10
Description: A flaw was found in the Linux kernel related to incorrect code generation management in the can optimize function, which can lead to a violation of memory access. The highest threat from this issue is to data confidentiality, integrity, and system availability.
Recommendations: For Linux kernel versions prior to 5.10, update to version 5.10 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive data and system resources to minimize the risk of exploitation.

Exploit

Fix

Code Injection

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-94

Related Identifiers

ALT-PU-2020-3536
ALT-PU-2020-3553
ALT-PU-2020-3571
ALT-PU-2021-1083
ALT-PU-2021-1105
ALT-PU-2021-1446
ALT-PU-2021-1621
ALT-PU-2021-1656
ALT-PU-2021-1739
ALT-PU-2021-1862
ALT-PU-2021-1866
ALT-PU-2021-1870
BDU:2021-01617
CVE-2021-3411
USN-4912-1

Affected Products

Alt Linux
Linuxmint
Linux Kernel
Ubuntu