PT-2021-2376 · Linux+4 · Linux Kernel+4

Pedro Sampaio · Published 2021-01-20 · Updated 2023-06-30 · CVE-2021-20268

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds access flaw was found in the Linux kernel's implementation of the eBPF code verifier in the way a user running the eBPF script calls dev map init map or sock map alloc. This flaw allows a local user to crash the system or possibly escalate their privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Integer Overflow

RCE

Weakness Enumeration

CWE-190

CWE-20

Related Identifiers

ALT-PU-2021-1136

ALT-PU-2021-1170

ALT-PU-2021-1188

ALT-PU-2021-1417

ALT-PU-2021-1424

ALT-PU-2021-1446

ALT-PU-2021-1621

ALT-PU-2021-1656

ALT-PU-2021-1739

ALT-PU-2021-1862

ALT-PU-2021-1866

ALT-PU-2021-1870

BDU:2021-01616

CVE-2021-20268

OPENSUSE-SU-2021:1975-1

OPENSUSE-SU-2021:1977-1

OPENSUSE-SU-2021_1975-1

OPENSUSE-SU-2021_1977-1

SUSE-SU-2021:1975-1

SUSE-SU-2021:1977-1

USN-4910-1

Affected Products

Alt Linux

Linuxmint

Linux Kernel

Suse

Ubuntu

References · 411

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_xtables_heap_oob_write_priv_esc.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2021_3490_ebpf_alu32_bounds_check_lpe.rb · Exploit
• 🔥 https://github.com/Bonfee/CVE-2022-25636 · Exploit
• 🔥 https://github.com/chompie1337/Linux_LPE_eBPF_CVE-2021-3490 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19037 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19039 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19036 · Exploit
• 🔥 https://github.com/tr3ee/CVE-2021-4204 · Exploit
• 🔥 https://github.com/veritas501/CVE-2021-22555-PipeVersion · Exploit
• 🔥 https://github.com/xyjl-ly/CVE-2021-22555-Exploit · Exploit
• 🔥 https://github.com/jordan9001/vsock_poc · Exploit
• 🔥 https://github.com/veritas501/CVE-2022-25636-PipeVersion · Exploit
• 🔥 https://github.com/xmzyshypnc/CVE-2020-27194 · Exploit
• 🔥 https://github.com/tdwyer/CVE-2020-25705 · Exploit
• 🔥 https://github.com/cgwalters/container-cve-2021-22555 · Exploit