NetSight
IP …
high7.8

CVE-2021-29154

BPF JIT compilers in the Linux kernel through 5.11.12 have incorrect computation of branch displacements, allowing them to execute arbitrary code within the ke…

Impact

BPF JIT compilers in the Linux kernel through 5.11.12 have incorrect computation of branch displacements, allowing them to execute arbitrary code within the kernel context. This affects arch/x86/net/bpf_jit_comp.c and arch/x86/net/bpf_jit_comp32.c.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.0 before 4.4.266
from 4.5 before 4.9.266
from 4.10 before 4.14.230
from 4.15 before 4.19.186
from 4.20 before 5.4.111
from 5.5 before 5.10.29
FedoraprojectFedora
Version 33
DebianDebian Linux
Version 9.0
NetappCloud Backup
All versions
NetappHci Management Node
All versions
NetappSolidfire
All versions
NetappH300s Firmware
All versions
NetappH500s Firmware
All versions
NetappH700s Firmware
All versions
NetappH300e Firmware
All versions
NetappH500e Firmware
All versions
NetappH700e Firmware
All versions

Weakness classification

CWE-77

References