PT-2020-6700 · Linux+5 · Linux Kernel+5

Dhananjay Arunesh · Published 2020-03-25 · Updated 2025-06-17 · CVE-2021-4159

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel's eBPF verifier when handling internal data structures allows internal memory locations to be returned to userspace. This can be exploited by a local attacker with permissions to insert eBPF code to the kernel, potentially leaking internal kernel memory details and defeating some exploit mitigations in place for the kernel.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

CWE-17

CWE-202

Related Identifiers

ALT-PU-2020-2098

ALT-PU-2020-2164

ALT-PU-2020-2209

ALT-PU-2020-2409

ALT-PU-2020-2432

ALT-PU-2020-2687

ALT-PU-2021-1621

ALT-PU-2021-1656

ALT-PU-2021-1739

ALT-PU-2021-1862

ALT-PU-2021-1866

ALT-PU-2021-1870

BDU:2022-05426

CVE-2021-4159

DLA-3131-1

OESA-2022-1559

OPENSUSE-SU-2022:0363-1

OPENSUSE-SU-2022_0363-1

SUSE-SU-2022:0363-1

SUSE-SU-2025:01983-1

SUSE-SU-2025_01983-1

USN-5668-1

USN-5677-1

USN-5682-1

USN-5706-1

USN-5790-1

Affected Products

Alt Linux

Astra Linux

Linuxmint

Linux Kernel

Suse

Ubuntu

References · 460

• https://ubuntu.com/security/CVE-2022-39188 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-40307 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-33742 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:01983-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-4159 · Security Note
• https://ubuntu.com/security/CVE-2022-26373 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-05426 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-0617 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-25258 · Security Note
• https://ubuntu.com/security/CVE-2022-20421 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-4159 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5790-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-20369 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5682-1 · Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=294f2fc6da27620a506e6c050241655459ccd6bd · Vendor Advisory