K74251611 : Linux kernel vulnerability CVE-2021-38166

Security Advisory Description

In kernel/bpf/hashtab.c in the Linux kernel through 5.13.8, there is an integer overflow and out-of-bounds write when many elements are placed in a single bucket. NOTE: exploitation might be impractical without the CAP_SYS_ADMIN capability. (CVE-2021-38166)

Impact

An attacker may be able to exploit this vulnerability to compromise the data confidentiality, integrity, and availability of the affected system.