CVE-2021-38300

arch/mips/net/bpf_jit.c in the Linux kernel before 5.4.10 can generate undesirable machine code when transforming unprivileged cBPF programs, allowing…

published September 20, 2021

CVSS
—
EPSS
1%
Percentile
47.1
In the wild
Unconfirmed
What it is

arch/mips/net/bpf_jit.c in the Linux kernel before 5.4.10 can generate undesirable machine code when transforming unprivileged cBPF programs, allowing execution of arbitrary code within the kernel context. This occurs because conditional branches can exceed the 128 KB limit of the MIPS architecture.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00583 · 47.1th percentile
Published
2021-09-20T05:25Z
EPSS history
Timeline
  • 20 SEP 05:25Z
    arch/mips/net/bpf_jit.c in the Linux kernel before 5.4.10 can generate undesirable machine code when transforming unprivileged cBPF programs, allowing…
    cvelistv5