PT-2024-11083 · Linux+2 · Linux Kernel+2
Published
2021-05-03
·
Updated
2025-01-09
·
CVE-2021-46974
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to the Linux kernel's bpf (Berkeley Packet Filter) functionality, specifically with the masking negation logic when the off reg is in the dst register. The negation logic is not correct, and as a fix, a final bitwise and-op is performed unconditionally into AX from the off reg, then the pointer is moved from the src to dst, and finally AX is used as the source for the original pointer arithmetic operation. This ensures the inversion yields a correct result. The single non-AX mov in between is possible due to constant blinding retaining it as it's not an immediate based operation.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Suse