CVE-2021-3489

The eBPF RINGBUF bpfringbufreserve function in the Linux kernel did not check that the allocated size was smaller than the ringbuf size, allowing an attacker to perform out-of-bounds writes within the kernel and therefore, arbitrary code execution. This issue was fixed via commit 4b81ccebaeee "bp...

Design/Logic Flaw

The eBPF RINGBUF bpfringbufreserve function in the Linux kernel did not check that the allocated size was smaller than the ringbuf size, allowing an attacker to perform out-of-bounds writes within the kernel and therefore, arbitrary code execution. This issue was fixed via commit 4b81ccebaeee "bp...

CVE-2021-3489 Linux kernel eBPF RINGBUF map oversized allocation

The eBPF RINGBUF bpfringbufreserve function in the Linux kernel did not check that the allocated size was smaller than the ringbuf size, allowing an attacker to perform out-of-bounds writes within the kernel and therefore, arbitrary code execution. This issue was fixed via commit 4b81ccebaeee "bp...

CVE-2021-3489

The eBPF RINGBUF bpfringbufreserve function in the Linux kernel did not check that the allocated size was smaller than the ringbuf size, allowing an attacker to perform out-of-bounds writes within the kernel and therefore, arbitrary code execution. This issue was fixed via commit 4b81ccebaeee "bp...

CVE-2021-3489

CVE-2021-3489 concerns the Linux kernel eBPF RINGBUF: the bpf_ringbuf_reserve() function could allocate a size larger than the ringbuf, enabling out-of-bounds writes and potential arbitrary code execution. The issue was fixed by commit 4b81ccebaeee ("bpf, ringbuf: Deny reserve of buffers larger t...

PT-2021-24683

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.8 through v5.12.4 Description A signed overflow issue in the ringbuf process ring function of libbpf has been identified. The actual impact and attack plausibility of this issue have not yet been proven. Recommendation...

PT-2021-28677

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.8 through v5.12.4 Description The issue is related to a signed overflow in the ringbuf process ring function. It was introduced in version v5.8 and fixed in version v5.12.5. The actual impact and attack plausibility ha...

PT-2021-28794

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.8 through v5.10.37 Description The issue is related to a signed overflow in the ringbuf process ring function. It was introduced in version v5.8 and fixed in version v5.10.38. The actual impact and attack plausibility...

PT-2021-24800

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.8 through v5.10.37 Description The issue is related to a signed overflow in the ringbuf process ring function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-4949-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4949-1 advisory. Ryota Shiga discovered that the eBPF implementation in the Linux kernel did not properly verify that a BPF program only reserved as much memory for a rin...

CVE-2021-3489

The eBPF RINGBUF bpfringbufreserve function in the Linux kernel did not check that the allocated size was smaller than the ringbuf size, allowing an attacker to perform out-of-bounds writes within the kernel and therefore, arbitrary code execution. This issue was fixed via commit 4b81ccebaeee "bp...

PT-2021-4221

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to v5.13-rc4 Linux kernel versions prior to v5.12.4 Linux kernel versions prior to v5.11.21 Linux kernel versions prior to v5.10.37 Description The eBPF RINGBUF bpf ringbuf reserve function in the Linux kernel did n...