Lucene search

K
osvGoogleOSV:USN-5140-1
HistoryNov 11, 2021 - 5:40 a.m.

linux-oem-5.14 vulnerabilities

2021-11-1105:40:50
Google
osv.dev
7

AI Score

8

Confidence

High

EPSS

0.001

Percentile

32.2%

It was discovered that the AMD Cryptographic Coprocessor (CCP) driver in
the Linux kernel did not properly deallocate memory in some error
conditions. A local attacker could use this to cause a denial of service
(memory exhaustion). (CVE-2021-3744, CVE-2021-3764)

It was discovered that an integer overflow could be triggered in the eBPF
implementation in the Linux kernel when preallocating objects for stack
maps. A privileged local attacker could use this to cause a denial of
service or possibly execute arbitrary code. (CVE-2021-41864)