CVE-2021-4204
HIGH severity · CVSS 7.1 · Improper input validation
7.1CVSS HIGH
Summary
An out-of-bounds (OOB) memory access flaw was found in the Linux kernel's eBPF due to an Improper Input Validation. This flaw allows a local attacker with a special privilege to crash the system or leak internal information.
Impact & exploitability
Attack vectorLocal
Attack complexityLow
Privileges requiredLow
User interactionNone
Confidentiality impactHigh
Integrity impactNone
Availability impactHigh
Exploit probability (EPSS)1%
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Affected products we track (3)
Recommendation
Apply the vendor fix promptly. Open any affected product above for its exact safe version.
Official patch: https://www.openwall.com/lists/oss-security/2022/01/11/4 ↗
Additional information
- NVD record
- https://www.openwall.com/lists/oss-security/2022/01/11/4Patch
- https://access.redhat.com/security/cve/CVE-2021-4204Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2039178Advisory
- https://security-tracker.debian.org/tracker/CVE-2021-4204Advisory
- https://security.netapp.com/advisory/ntap-20221228-0003/Advisory