Back to feed
EUVD-2018-13801 · Published Dec 8, 2021
The BPF subsystem in the Linux kernel before 4.17 mishandles situations with a long jump over an instruction sequence where inner instructions require substantial expansions into multiple BPF instructions, leading to an overflow. This affects kernel/bpf/core.c and net/core/filter.c.
Technologies
Netapp H410C FirmwareLinux Linux KernelNetapp H500ENetapp H300S FirmwareNetapp H700E FirmwareNetapp H410SNetapp Cloud BackupNetapp H700S FirmwareNetapp H700ENetapp H300ENetapp H300E FirmwareNetapp H500S FirmwareNetapp H300SNetapp H700SNetapp H500SNetapp H500E FirmwareNetapp H410S FirmwareNetapp H410C
Weaknesses
CWE-120
CVSS scores
- v3.17.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - v2.04.6
AV:L/AC:L/Au:N/C:P/I:P/A:P
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Privilege Escalation
References
Potentially impacted assets
See if this affects your attack surface
