High · published August 7, 2021
In kernel/bpf/hashtab.c in the Linux kernel through 5.13.8, there is an integer overflow and out-of-bounds write when many elements are placed in a single bucket. NOTE: exploitation might be impractical without the CAP_SYS_ADMIN capability.
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | ≥ 5.6, < 5.10.60 | 5.10.60 |
| linux/linux_kernel | ≥ 5.11, < 5.13.12 | 5.13.12 |
| fedoraproject/fedora | all versions | — |
| fedoraproject/fedora | all versions | — |
| debian/debian_linux | all versions | — |