CVE-2021-4159

Katalog CVE

CVSS 4.4 · Medium EPSS 0,25%

Kerentanan Exposure of Sensitive Information Through Data Queries pada linux kernel, redhat enterprise linux +1 lainnya. Skor CVSS 3.1 4.4 (Medium) menurut NVD.

Deskripsi (NVD)

A vulnerability was found in the Linux kernel's EBPF verifier when handling internal data structures. Internal memory locations could be returned to userspace. A local attacker with the permissions to insert eBPF code to the kernel can use this to leak internal kernel memory details defeating some of the exploit mitigations in place for the kernel.

Rincian

Terbit di NVD

24 Agustus 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

4.4 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-202: Exposure of Sensitive Information Through Data Queries

EPSS (30 hari)

0,25% peluang dieksploitasi; lebih tinggi dari 14,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=294f2fc6da27620a506e6c0502416554... mailing list · patch · advisory vendor
• https://access.redhat.com/security/cve/CVE-2021-4159 advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html mailing list · advisory pihak ketiga
• https://security-tracker.debian.org/tracker/CVE-2021-4159 advisory pihak ketiga
• https://bugzilla.redhat.com/show_bug.cgi?id=2036024 issue tracking