NetSight
IP …
high7.8

CVE-2021-38166

In kernel/bpf/hashtab.c in the Linux kernel through 5.13.8, there is an integer overflow and out-of-bounds write when many elements are placed in a single buck…

Impact

In kernel/bpf/hashtab.c in the Linux kernel through 5.13.8, there is an integer overflow and out-of-bounds write when many elements are placed in a single bucket. NOTE: exploitation might be impractical without the CAP_SYS_ADMIN capability.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.6 before 5.10.60
from 5.11 before 5.13.12
FedoraprojectFedora
Versions 33, 34
DebianDebian Linux
Version 11.0

Weakness classification

CWE-190CWE-787

References