PT-2022-4518 · Linux+10 · Linux Kernel+10

Tr3E · Published 2020-08-26 · Updated 2026-03-14 · CVE-2021-4204

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions 5.8 through 5.16

Description An out-of-bounds (OOB) memory access flaw was found in the Linux kernel's eBPF due to an Improper Input Validation. This flaw allows a local attacker with special privileges to crash the system or leak internal information. The issue can also be exploited by a local unprivileged user to gain elevated privileges and execute code at the kernel level.

Recommendations For Linux kernel versions 5.8 through 5.16, update to a newer version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Memory Corruption

RCE

Weakness Enumeration

CWE-119

CWE-787

CWE-20

Related Identifiers

ALSA-2024:2950

ALSA-2024:3138

ALSA-2024_10939

ALSA-2024_2394

ALSA-2024_2950

ALSA-2024_3138

ALSA-2025_12746

ALSA-2025_12752

ALSA-2025_12753

ALSA-2025_16880

ALT-PU-2020-2688

ALT-PU-2020-2716

ALT-PU-2020-2770

ALT-PU-2020-3210

ALT-PU-2021-1083

ALT-PU-2021-1105

ALT-PU-2021-1621

ALT-PU-2021-1656

ALT-PU-2021-1739

ALT-PU-2021-1862

ALT-PU-2021-1866

ALT-PU-2021-1870

BDU:2022-05386

CESA-2024_2950

CESA-2024_3138

CVE-2021-4204

ELSA-2024-3138

INFSA-2024_2950

INFSA-2024_3138

MGASA-2022-0021

OPENSUSE-SU-2022_2520-1

OPENSUSE-SU-2022_2615-1

OPENSUSE-SU-2024_3483-1

RHSA-2024:0724

RHSA-2024:10262

RHSA-2024:2950

RHSA-2024:3138

RHSA-2024_2950

RHSA-2024_3138

RLSA-2024:2950

RLSA-2024:3138

RLSA-2024_2950

RLSA-2024_3138

SUSE-SU-2022:2520-1

SUSE-SU-2022:2615-1

SUSE-SU-2024:3483-1

USN-5217-1

USN-5218-1

USN-5219-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Debian

Linuxmint

Linux Kernel

Red Hat

Rocky Linux

Suse

Ubuntu

References · 1151

• 🔥 https://github.com/tr3ee/CVE-2021-4204 · Exploit
• https://ubuntu.com/security/CVE-2021-4090 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2024:3138 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-4204 · Security Note
• https://errata.rockylinux.org/RLSA-2024:2950 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2021-4204 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-43389 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-43056 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-4204 · Security Note
• https://ubuntu.com/security/CVE-2021-43267 · Vendor Advisory
• https://openwall.com/lists/oss-security/2022/01/11/4 · Patch
• https://ubuntu.com/security/CVE-2021-41864 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5218-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-4204 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5217-1 · Vendor Advisory