CVE-2021-20320

Description

A flaw was found in s390 eBPF JIT in bpf_jit_insn in arch/s390/net/bpf_jit_comp.c in the Linux kernel. In this flaw, a local attacker with special user privilege can circumvent the verifier and may lead to a confidentiality problem.

References

https://lore.kernel.org/bpf/20210902185229.1840281-1-johan.almbladh%40anyfinetworks.com/

https://bugzilla.redhat.com/show_bug.cgi?id=2010090

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3