NetSight
IP …
high7.8

CVE-2021-38300

arch/mips/net/bpf_jit.c in the Linux kernel before 5.4.10 can generate undesirable machine code when transforming unprivileged cBPF programs, allowing executio…

Impact

arch/mips/net/bpf_jit.c in the Linux kernel before 5.4.10 can generate undesirable machine code when transforming unprivileged cBPF programs, allowing execution of arbitrary code within the kernel context. This occurs because conditional branches can exceed the 128 KB limit of the MIPS architecture.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.16 before 4.14.251
from 4.15 before 4.19.211
from 4.20 before 5.4.153
from 5.5 before 5.10.71
from 5.11 before 5.14.10
NetappCloud Backup
All versions
NetappH410c Firmware
All versions
NetappH300s Firmware
All versions
NetappH500s Firmware
All versions
NetappH700s Firmware
All versions
NetappH300e Firmware
All versions
NetappH500e Firmware
All versions
NetappH700e Firmware
All versions
NetappH410s Firmware
All versions
DebianDebian Linux
Versions 9.0, 10.0

References