CVE-2021-38166

Katalog CVE

CVSS 7.8 · High EPSS 0,32%

Kerentanan Integer Overflow or Wraparound pada linux kernel, fedoraproject fedora +1 lainnya. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

In kernel/bpf/hashtab.c in the Linux kernel through 5.13.8, there is an integer overflow and out-of-bounds write when many elements are placed in a single bucket. NOTE: exploitation might be impractical without the CAP_SYS_ADMIN capability.

Rincian

Terbit di NVD

7 Agustus 2021

Terakhir diubah

8 Oktober 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-190: Integer Overflow or Wraparound
CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,32% peluang dieksploitasi; lebih tinggi dari 22,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf.git/commit/?id=c4eb1f403243fc7bbb7de644db8587c03de36da... patch · advisory vendor
• https://lore.kernel.org/bpf/20210806150419.109658-1-th.yasumatsu%40gmail.com/ patch
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GUVLBJKZMWA3E... advisory pihak ketiga
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UL6CH5M5PRLMA... advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20210909-0001/ advisory pihak ketiga
• https://www.debian.org/security/2021/dsa-4978 advisory pihak ketiga