CVE-2021-4159CWE-202

A vulnerability was found in the Linux kernel's EBPF verifier when handling internal data structures

published August 24, 2022

CVSS
—
EPSS
0%
Percentile
15.2
In the wild
Unconfirmed
What it is

A vulnerability was found in the Linux kernel's EBPF verifier when handling internal data structures. Internal memory locations could be returned to userspace. A local attacker with the permissions to insert eBPF code to the kernel can use this to leak internal kernel memory details defeating some of the exploit mitigations in place for the kernel.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00248 · 15.2th percentile
Weakness
CWE-202 · Exposure of Sensitive Information Through Data Queries
Published
2022-08-24T15:10Z
EPSS history
Timeline
  • 24 AUG 15:10Z
    A vulnerability was found in the Linux kernel's EBPF verifier when handling internal data structures
    cvelistv5