CVE-2021-4135: Linux Kernel: hassas bilgi ifşası

Açıklama (NVD)

A memory leak vulnerability was found in the Linux kernel's eBPF for the Simulated networking device driver in the way user uses BPF for the device such that function nsim_map_alloc_elem being called. A local user could use this flaw to get unauthorized access to some data.

Özet bilgiler

Ürün

Linux Linux Kernel

CVSS v3.1

5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

%0,23 (yüzdelik 14)

CWE

CWE-200

Yama

Mevcut

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• git.kernel.org
• git.kernel.org
• CWE-200