CVE-2021-3600

It was discovered that the eBPF implementation in the Linux kernel did not properly track bounds information for 32 bit registers when performing div and mod…

High · published January 8, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
19.6
In the wild
Unconfirmed
What it is

It was discovered that the eBPF implementation in the Linux kernel did not properly track bounds information for 32 bit registers when performing div and mod operations. A local attacker could use this to possibly execute arbitrary code.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00282 · 19.6th percentile
Published
2024-01-08T18:16Z
EPSS history
Timeline
  • 08 JAN 18:16Z
    It was discovered that the eBPF implementation in the Linux kernel did not properly track bounds information for 32 bit registers when performing div and mod…
    cvelistv5