CVE-2021-3490

A flaw was found in the Linux kernels eBPF verification code. It was discovered that eBPF ALU32 bounds tracking for bitwise ops AND, OR and XOR did not update the 32-bit bounds. By default accessing the eBPF verifier is only accessible to privileged users with CAPSYSADMIN. A local user with the...