CVE-2021-38300

Katalog CVE

CVSS 7.8 · High EPSS 0,58%

Kerentanan pada linux kernel, netapp cloud backup +9 lainnya. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

arch/mips/net/bpf_jit.c in the Linux kernel before 5.4.10 can generate undesirable machine code when transforming unprivileged cBPF programs, allowing execution of arbitrary code within the kernel context. This occurs because conditional branches can exceed the 128 KB limit of the MIPS architecture.

Rincian

Terbit di NVD

20 September 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

EPSS (30 hari)

0,58% peluang dieksploitasi; lebih tinggi dari 46,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.10 mailing list · advisory vendor
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=37cb28ec7d3a36a5bace7063a3dba633... exploit · mailing list · patch · advisory vendor
• http://www.openwall.com/lists/oss-security/2021/09/15/5 mailing list · patch · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20211008-0003/ advisory pihak ketiga
• https://www.debian.org/security/2022/dsa-5096 advisory pihak ketiga