← Database

CVE-2021-3600

HIGH CVSS: 7.8 Published: 2024-01-08 Modified: 2026-06-17

Description

It was discovered that the eBPF implementation in the Linux kernel did not properly track bounds information for 32 bit registers when performing div and mod operations. A local attacker could use this to possibly execute arbitrary code.

Affected Platforms

Redhat Enterprise LinuxLinux Linux KernelCanonical Ubuntu LinuxFedoraproject Fedora

Weakness Type

CWE-125, CWE-787, CWE-125, CWE-787

References