Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wj6w-52qh-v4q5

Опубликовано: 12 фев. 2022
Источник: github
Github: Не прошло ревью

Описание

The check_alu_op() function in kernel/bpf/verifier.c in the Linux kernel through v5.16-rc5 did not properly update bounds while handling the mov32 instruction, which allows local users to obtain potentially sensitive address information, aka a "pointer leak."

The check_alu_op() function in kernel/bpf/verifier.c in the Linux kernel through v5.16-rc5 did not properly update bounds while handling the mov32 instruction, which allows local users to obtain potentially sensitive address information, aka a "pointer leak."

EPSS

Процентиль: 21%
0.00069
Низкий

Дефекты

CWE-668

Связанные уязвимости

CVSS3: 5.5
ubuntu
почти 4 года назад

The check_alu_op() function in kernel/bpf/verifier.c in the Linux kernel through v5.16-rc5 did not properly update bounds while handling the mov32 instruction, which allows local users to obtain potentially sensitive address information, aka a "pointer leak."

CVSS3: 4.4
redhat
почти 4 года назад

The check_alu_op() function in kernel/bpf/verifier.c in the Linux kernel through v5.16-rc5 did not properly update bounds while handling the mov32 instruction, which allows local users to obtain potentially sensitive address information, aka a "pointer leak."

CVSS3: 5.5
nvd
почти 4 года назад

The check_alu_op() function in kernel/bpf/verifier.c in the Linux kernel through v5.16-rc5 did not properly update bounds while handling the mov32 instruction, which allows local users to obtain potentially sensitive address information, aka a "pointer leak."

CVSS3: 5.5
msrc
почти 4 года назад

The check_alu_op() function in kernel/bpf/verifier.c in the Linux kernel through v5.16-rc5 did not properly update bounds while handling the mov32 instruction which allows local users to obtain potentially sensitive address information aka a "pointer leak."

CVSS3: 5.5
debian
почти 4 года назад

The check_alu_op() function in kernel/bpf/verifier.c in the Linux kern ...

EPSS

Процентиль: 21%
0.00069
Низкий

Дефекты

CWE-668