NetSight
IP …
high7.8

CVE-2021-33200

kernel/bpf/verifier.c in the Linux kernel through 5.12.7 enforces incorrect limits for pointer arithmetic operations, aka CID-bb01a1bba579.

Impact

kernel/bpf/verifier.c in the Linux kernel through 5.12.7 enforces incorrect limits for pointer arithmetic operations, aka CID-bb01a1bba579. This can be abused to perform out-of-bounds reads and writes in kernel memory, leading to local privilege escalation to root. In particular, there is a corner case where the off reg causes a masking direction change, which then results in an incorrect final aux->alu_limit.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.4.116 before 5.4.123
from 5.10.33 before 5.10.41
from 5.11.17 before 5.12.8
FedoraprojectFedora
Versions 33, 34
NetappCloud Backup
All versions
NetappSolidfire \& Hci Management Node
All versions
NetappSolidfire Baseboard Management Controller
All versions
NetappH300s Firmware
All versions
NetappH500s Firmware
All versions
NetappH300e Firmware
All versions
NetappH500e Firmware
All versions
NetappH700e Firmware
All versions
NetappH410s Firmware
All versions
NetappH700s Firmware
All versions

Weakness classification

CWE-787

References