CVE-2021-4001

2021-11-2500:00:00

ubuntu.com

4.1 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N

4.7 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:N/I:C/A:N

0.0004 Low

EPSS

Percentile

5.3%

JSON

A race condition was found in the Linux kernel’s ebpf verifier between
bpf_map_update_elem and bpf_map_freeze due to a missing lock in
kernel/bpf/syscall.c. In this flaw, a local user with a special privilege
(cap_sys_admin or cap_bpf) can modify the frozen mapped address space. This
flaw affects kernel versions prior to 5.16 rc2.

OSVersionArchitecturePackageVersionFilename
ubuntu21.10noarchlinux-aws< 5.13.0-1012.13UNKNOWN
ubuntu20.04noarchlinux-aws< 5.4.0-1111.120UNKNOWN
ubuntu20.04noarchlinux-aws-5.11< 5.11.0-1028.31~20.04.1UNKNOWN
ubuntu20.04noarchlinux-aws-5.13< 5.13.0-1012.13~20.04.1UNKNOWN
ubuntu18.04noarchlinux-aws-5.4< 5.4.0-1111.120~18.04.1) Available with Ubuntu Pro or Ubuntu Pro (Infra-onlyUNKNOWN
ubuntu21.10noarchlinux-azure< 5.13.0-1013.15UNKNOWN
ubuntu20.04noarchlinux-azure< 5.4.0-1117.124UNKNOWN
ubuntu20.04noarchlinux-azure-5.11< 5.11.0-1028.31~20.04.2UNKNOWN
ubuntu18.04noarchlinux-azure-5.4< 5.4.0-1117.124~18.04.1) Available with Ubuntu Pro or Ubuntu Pro (Infra-onlyUNKNOWN
ubuntu20.04noarchlinux-bluefield< 5.4.0-1072.78UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	21.10	noarch	linux-aws	< 5.13.0-1012.13	UNKNOWN
ubuntu	20.04	noarch	linux-aws	< 5.4.0-1111.120	UNKNOWN
ubuntu	20.04	noarch	linux-aws-5.11	< 5.11.0-1028.31~20.04.1	UNKNOWN
ubuntu	20.04	noarch	linux-aws-5.13	< 5.13.0-1012.13~20.04.1	UNKNOWN
ubuntu	18.04	noarch	linux-aws-5.4	< 5.4.0-1111.120~18.04.1) Available with Ubuntu Pro or Ubuntu Pro (Infra-only	UNKNOWN
ubuntu	21.10	noarch	linux-azure	< 5.13.0-1013.15	UNKNOWN
ubuntu	20.04	noarch	linux-azure	< 5.4.0-1117.124	UNKNOWN
ubuntu	20.04	noarch	linux-azure-5.11	< 5.11.0-1028.31~20.04.2	UNKNOWN
ubuntu	18.04	noarch	linux-azure-5.4	< 5.4.0-1117.124~18.04.1) Available with Ubuntu Pro or Ubuntu Pro (Infra-only	UNKNOWN
ubuntu	20.04	noarch	linux-bluefield	< 5.4.0-1072.78	UNKNOWN