{"id":"CVE-2021-31440","aliases":["A-189614572","ALSA-2021:4356","CLSA-2022-1644933991","DEBIAN-CVE-2021-31440","EUVD-2021-18340","GHSA-c57j-pq55-rh2x","MGASA-2021-0214","MGASA-2021-0215","PUB-A-189614572","RHSA-2021:4140","RHSA-2021:4356","SUSE-SU-2021:3360-1","UBUNTU-CVE-2021-31440","USN-4999-1","USN-5001-1"],"status":"published","title":"This vulnerability allows local attackers to escalate privileges on affected installations of...","description":"This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.11.15. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of eBPF programs. The issue results from the lack of proper validation of user-supplied eBPF programs prior to executing them. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the kernel. Was ZDI-CAN-13661.","severity":{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.01754,"percentile":0.78111,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-682"],"published":"2021-05-19T19:29:59Z","modified":"2026-11-05T16:32:28Z","exploits":[{"source":"pocgithub","id":"WhatsWrongAndWhy/CVE-2021-31440","title":"WhatsWrongAndWhy/CVE-2021-31440","date":"2026-07-21","url":"https://github.com/WhatsWrongAndWhy/CVE-2021-31440"}],"fixes":[{"ecosystem":"Debian:12","package":"linux","fixed_in":["5.10.38-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"linux","fixed_in":["5.10.38-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"linux","fixed_in":["5.10.38-1"],"sources":["osv"]},{"ecosystem":"Android","package":":linux_kernel:","fixed_in":[":2022-06-05"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-aws-5.8","fixed_in":["5.8.0-1038.40~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-5.8","fixed_in":["5.8.0-1036.38~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-gcp-5.8","fixed_in":["5.8.0-1035.37~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-hwe-5.8","fixed_in":["5.8.0-59.66~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-oem-5.10","fixed_in":["5.10.0-1032.33"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-oracle-5.8","fixed_in":["5.8.0-1033.34~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"linux-riscv-5.8","fixed_in":["5.8.0-29.31~20.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-348.el8"}]}],"bundled":45},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"bpftool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-cross-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-debug-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-debug-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-debug-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-debug-modules-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-ipaclones-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-modules-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-selftests-internal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"python3-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.10.38-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.10.38-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.10.38-1"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.10.37-2.mga7"}]}],"bundled":7},{"source":"osv","ecosystem":"Mageia:7","package":"kmod-virtualbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.22-1.4.mga7"}]}],"bundled":7},{"source":"osv","ecosystem":"Mageia:7","package":"kmod-xtables-addons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13-26.mga7"}]}],"bundled":7},{"source":"osv","ecosystem":"Mageia:8","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.10.37-2.mga8"}]}],"bundled":7},{"source":"osv","ecosystem":"Mageia:8","package":"kmod-virtualbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.22-1.4.mga8"}]}],"bundled":7},{"source":"osv","ecosystem":"Mageia:8","package":"kmod-xtables-addons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18-1.4.mga8"}]}],"bundled":7},{"source":"osv","ecosystem":"Mageia:7","package":"kernel-linus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.10.37-1.mga7"}]}],"bundled":7},{"source":"osv","ecosystem":"Mageia:8","package":"kernel-linus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.10.37-1.mga8"}]}],"bundled":7},{"source":"osv","ecosystem":"Android","package":":linux_kernel:","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":":0"},{"fixed":":2022-06-05"}]}],"versions":["Kernel"]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::nfv","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.rt7.130.el8"}]}],"bundled":46},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::nfv","package":"kernel-rt-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.rt7.130.el8"}]}],"bundled":46},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::nfv","package":"kernel-rt-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.rt7.130.el8"}]}],"bundled":46},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::nfv","package":"kernel-rt-debug-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.rt7.130.el8"}]}],"bundled":46},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::nfv","package":"kernel-rt-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.rt7.130.el8"}]}],"bundled":46},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::nfv","package":"kernel-rt-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.rt7.130.el8"}]}],"bundled":46},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::nfv","package":"kernel-rt-debug-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.rt7.130.el8"}]}],"bundled":46},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::nfv","package":"kernel-rt-debug-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.rt7.130.el8"}]}],"bundled":46},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::nfv","package":"kernel-rt-debug-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.rt7.130.el8"}]}],"bundled":46},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::nfv","package":"kernel-rt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.rt7.130.el8"}]}],"bundled":46},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::nfv","package":"kernel-rt-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.rt7.130.el8"}]}],"bundled":46},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::nfv","package":"kernel-rt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.rt7.130.el8"}]}],"bundled":46},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::nfv","package":"kernel-rt-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.rt7.130.el8"}]}],"bundled":46},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::nfv","package":"kernel-rt-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.rt7.130.el8"}]}],"bundled":46},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::nfv","package":"kernel-rt-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.rt7.130.el8"}]}],"bundled":46},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::realtime","package":"kernel-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.rt7.130.el8"}]}],"bundled":46},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::realtime","package":"kernel-rt-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.rt7.130.el8"}]}],"bundled":46},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::realtime","package":"kernel-rt-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.rt7.130.el8"}]}],"bundled":46},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::realtime","package":"kernel-rt-debug-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.rt7.130.el8"}]}],"bundled":46},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::realtime","package":"kernel-rt-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.rt7.130.el8"}]}],"bundled":46},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::realtime","package":"kernel-rt-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.rt7.130.el8"}]}],"bundled":46},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::realtime","package":"kernel-rt-debug-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.rt7.130.el8"}]}],"bundled":46},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::realtime","package":"kernel-rt-debug-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.rt7.130.el8"}]}],"bundled":46},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::realtime","package":"kernel-rt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.rt7.130.el8"}]}],"bundled":46},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::realtime","package":"kernel-rt-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.rt7.130.el8"}]}],"bundled":46},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::realtime","package":"kernel-rt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.rt7.130.el8"}]}],"bundled":46},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::realtime","package":"kernel-rt-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.rt7.130.el8"}]}],"bundled":46},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::realtime","package":"kernel-rt-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.rt7.130.el8"}]}],"bundled":46},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bpftool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.el8"}]}],"bundled":61},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"bpftool-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.el8"}]}],"bundled":61},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.el8"}]}],"bundled":61},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-abi-stablelists","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.el8"}]}],"bundled":61},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.el8"}]}],"bundled":61},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.el8"}]}],"bundled":61},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-debug-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.el8"}]}],"bundled":61},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.el8"}]}],"bundled":61},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-debug-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.el8"}]}],"bundled":61},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-debug-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.el8"}]}],"bundled":61},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-debug-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.el8"}]}],"bundled":61},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.el8"}]}],"bundled":61},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-debuginfo-common-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.el8"}]}],"bundled":61},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-debuginfo-common-ppc64le","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.el8"}]}],"bundled":61},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-debuginfo-common-s390x","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.el8"}]}],"bundled":61},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.el8"}]}],"bundled":61},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.el8"}]}],"bundled":61},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.el8"}]}],"bundled":61},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.el8"}]}],"bundled":61},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.el8"}]}],"bundled":61},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.el8"}]}],"bundled":61},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.el8"}]}],"bundled":61},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-tools-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.el8"}]}],"bundled":61},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-zfcpdump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.el8"}]}],"bundled":61},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-zfcpdump-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.el8"}]}],"bundled":61},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-zfcpdump-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.el8"}]}],"bundled":61},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-zfcpdump-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.el8"}]}],"bundled":61},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-zfcpdump-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.el8"}]}],"bundled":61},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"kernel-zfcpdump-modules-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.el8"}]}],"bundled":61},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.el8"}]}],"bundled":61},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.el8"}]}],"bundled":61},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"python3-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.el8"}]}],"bundled":61},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"python3-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.el8"}]}],"bundled":61},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bpftool-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.el8"}]}],"bundled":61},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"kernel-debug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.el8"}]}],"bundled":61},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"kernel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.el8"}]}],"bundled":61},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"kernel-debuginfo-common-aarch64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.el8"}]}],"bundled":61},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"kernel-debuginfo-common-ppc64le","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.el8"}]}],"bundled":61},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"kernel-debuginfo-common-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.el8"}]}],"bundled":61},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"kernel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.el8"}]}],"bundled":61},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"kernel-tools-libs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.el8"}]}],"bundled":61},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.el8"}]}],"bundled":61},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"python3-perf-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0-348.el8"}]}],"bundled":61},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP3","package":"kernel-livepatch-SLE15-SP3_Update_0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7-3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-hwe-edge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.8.0-28.30~16.04.1","4.8.0-30.32~16.04.1","4.8.0-32.34~16.04.1","4.8.0-34.36~16.04.1","4.10.0-14.16~16.04.1","4.10.0-19.21~16.04.1","4.10.0-20.22~16.04.1","4.10.0-21.23~16.04.1","4.10.0-22.24~16.04.1","4.10.0-24.28~16.04.1","4.10.0-26.30~16.04.1","4.11.0-13.19~16.04.1","4.11.0-14.20~16.04.1","4.13.0-16.19~16.04.3","4.13.0-17.20~16.04.1","4.13.0-19.22~16.04.1","4.13.0-21.24~16.04.1","4.13.0-25.29~16.04.2","4.15.0-13.14~16.04.1","4.15.0-15.16~16.04.1","4.15.0-20.21~16.04.1","4.15.0-22.24~16.04.1","4.15.0-23.25~16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-aws-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.0-1021.24~18.04.1","5.0.0-1022.25~18.04.1","5.0.0-1023.26~18.04.1","5.0.0-1024.27~18.04.1","5.0.0-1025.28","5.0.0-1027.30"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-aws-5.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1016.17~18.04.1","5.3.0-1017.18~18.04.1","5.3.0-1019.21~18.04.1","5.3.0-1023.25~18.04.1","5.3.0-1028.30~18.04.1","5.3.0-1030.32~18.04.1","5.3.0-1032.34~18.04.2","5.3.0-1033.35","5.3.0-1034.36","5.3.0-1035.37"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-azure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1002.2","4.15.0-1003.3","4.15.0-1004.4","4.15.0-1008.8","4.15.0-1009.9","4.15.0-1012.12","4.15.0-1013.13","4.15.0-1014.14","4.15.0-1018.18","4.15.0-1019.19","4.15.0-1021.21","4.15.0-1022.23","4.15.0-1023.24","4.15.0-1025.26","4.15.0-1028.29","4.15.0-1030.31","4.15.0-1031.32","4.15.0-1032.33","4.15.0-1035.36","4.15.0-1036.38","4.15.0-1037.39","4.18.0-1011.11~18.04.1","4.18.0-1013.13~18.04.1","4.18.0-1014.14~18.04.1","4.18.0-1018.18~18.04.1","4.18.0-1019.19~18.04.1","4.18.0-1020.20~18.04.1","4.18.0-1023.24~18.04.1","4.18.0-1024.25~18.04.1","4.18.0-1025.27~18.04.1","5.0.0-1014.14~18.04.1","5.0.0-1016.17~18.04.1","5.0.0-1018.19~18.04.1","5.0.0-1020.21~18.04.1","5.0.0-1022.23~18.04.1","5.0.0-1023.24~18.04.1","5.0.0-1025.27~18.04.1","5.0.0-1027.29~18.04.1","5.0.0-1028.30~18.04.1","5.0.0-1029.31~18.04.1","5.0.0-1031.33","5.0.0-1032.34","5.0.0-1035.37","5.0.0-1036.38"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-azure-5.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1007.8~18.04.1","5.3.0-1008.9~18.04.1","5.3.0-1009.10~18.04.1","5.3.0-1010.11~18.04.1","5.3.0-1012.13~18.04.1","5.3.0-1013.14~18.04.1","5.3.0-1016.17~18.04.1","5.3.0-1018.19~18.04.1","5.3.0-1019.20~18.04.1","5.3.0-1020.21~18.04.1","5.3.0-1022.23~18.04.1","5.3.0-1028.29~18.04.1","5.3.0-1031.32~18.04.1","5.3.0-1032.33~18.04.1","5.3.0-1034.35~18.04.1","5.3.0-1035.36"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-azure-edge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.18.0-1006.6~18.04.1","4.18.0-1007.7~18.04.1","4.18.0-1008.8~18.04.1","5.0.0-1012.12~18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1001.1","4.15.0-1003.3","4.15.0-1005.5","4.15.0-1006.6","4.15.0-1008.8","4.15.0-1009.9","4.15.0-1010.10","4.15.0-1014.14","4.15.0-1015.15","4.15.0-1017.18","4.15.0-1018.19","4.15.0-1019.20","4.15.0-1021.22","4.15.0-1023.24","4.15.0-1024.25","4.15.0-1025.26","4.15.0-1026.27","4.15.0-1027.28","4.15.0-1028.29","4.15.0-1029.31","4.15.0-1030.32","4.15.0-1032.34","4.15.0-1033.35","4.15.0-1034.36","4.15.0-1036.38","4.15.0-1037.39","4.15.0-1040.42","4.15.0-1042.45","4.15.0-1044.70","5.0.0-1020.20~18.04.1","5.0.0-1021.21~18.04.1","5.0.0-1025.26~18.04.1","5.0.0-1026.27~18.04.1","5.0.0-1028.29~18.04.1","5.0.0-1029.30~18.04.1","5.0.0-1031.32","5.0.0-1033.34","5.0.0-1034.35"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gcp-5.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1008.9~18.04.1","5.3.0-1009.10~18.04.1","5.3.0-1010.11~18.04.1","5.3.0-1012.13~18.04.1","5.3.0-1014.15~18.04.1","5.3.0-1016.17~18.04.1","5.3.0-1017.18~18.04.1","5.3.0-1018.19~18.04.1","5.3.0-1020.22~18.04.1","5.3.0-1026.28~18.04.1","5.3.0-1029.31~18.04.1","5.3.0-1030.32~18.04.1","5.3.0-1032.34~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gcp-edge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.18.0-1004.5~18.04.1","4.18.0-1005.6~18.04.1","4.18.0-1006.7~18.04.1","4.18.0-1007.8~18.04.1","4.18.0-1008.9~18.04.1","4.18.0-1009.10~18.04.1","4.18.0-1011.12~18.04.1","4.18.0-1012.13~18.04.1","4.18.0-1013.14~18.04.1","4.18.0-1015.16~18.04.1","5.0.0-1011.11~18.04.1","5.0.0-1013.13~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-gke-4.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1030.32","4.15.0-1032.34","4.15.0-1033.35","4.15.0-1034.36","4.15.0-1036.38","4.15.0-1037.39","4.15.0-1040.42","4.15.0-1041.43","4.15.0-1042.44","4.15.0-1044.46","4.15.0-1045.48","4.15.0-1046.49","4.15.0-1048.51","4.15.0-1049.52","4.15.0-1050.53","4.15.0-1052.55","4.15.0-1055.58","4.15.0-1057.60","4.15.0-1058.61","4.15.0-1059.62","4.15.0-1063.66","4.15.0-1064.67","4.15.0-1066.69","4.15.0-1067.70","4.15.0-1069.72","4.15.0-1070.73","4.15.0-1072.76","4.15.0-1073.78","4.15.0-1074.79","4.15.0-1076.81","4.15.0-1077.82","4.15.0-1078.83","4.15.0-1079.84"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-hwe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.18.0-13.14~18.04.1","4.18.0-14.15~18.04.1","4.18.0-15.16~18.04.1","4.18.0-16.17~18.04.1","4.18.0-17.18~18.04.1","4.18.0-18.19~18.04.1","4.18.0-20.21~18.04.1","4.18.0-21.22~18.04.1","4.18.0-22.23~18.04.1","4.18.0-24.25~18.04.1","4.18.0-25.26~18.04.1","5.0.0-23.24~18.04.1","5.0.0-25.26~18.04.1","5.0.0-27.28~18.04.1","5.0.0-29.31~18.04.1","5.0.0-31.33~18.04.1","5.0.0-32.34~18.04.2","5.0.0-35.38~18.04.1","5.0.0-36.39~18.04.1","5.0.0-37.40~18.04.1","5.3.0-26.28~18.04.1","5.3.0-28.30~18.04.1","5.3.0-40.32~18.04.1","5.3.0-42.34~18.04.1","5.3.0-45.37~18.04.1","5.3.0-46.38~18.04.1","5.3.0-51.44~18.04.2","5.3.0-53.47~18.04.1","5.3.0-59.53~18.04.1","5.3.0-61.55~18.04.1","5.3.0-62.56~18.04.1","5.3.0-64.58~18.04.1","5.3.0-65.59","5.3.0-66.60","5.3.0-67.61","5.3.0-68.63","5.3.0-69.65","5.3.0-70.66","5.3.0-72.68","5.3.0-73.69","5.3.0-74.70","5.3.0-75.71","5.3.0-76.72"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-hwe-edge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.0-15.16~18.04.1","5.0.0-16.17~18.04.1","5.0.0-17.18~18.04.1","5.0.0-19.20~18.04.1","5.0.0-20.21~18.04.1","5.3.0-19.20~18.04.2","5.3.0-22.24~18.04.1","5.3.0-23.25~18.04.1","5.3.0-23.25~18.04.2","5.3.0-24.26~18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-oem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.15.0-1002.3","4.15.0-1004.5","4.15.0-1006.9","4.15.0-1008.11","4.15.0-1009.12","4.15.0-1012.15","4.15.0-1013.16","4.15.0-1015.18","4.15.0-1017.20","4.15.0-1018.21","4.15.0-1021.24","4.15.0-1024.29","4.15.0-1026.31","4.15.0-1028.33","4.15.0-1030.35","4.15.0-1033.38","4.15.0-1034.39","4.15.0-1035.40","4.15.0-1036.41","4.15.0-1038.43","4.15.0-1039.44","4.15.0-1043.48","4.15.0-1045.50","4.15.0-1050.57","4.15.0-1056.65","4.15.0-1057.66","4.15.0-1059.68","4.15.0-1063.72","4.15.0-1064.73","4.15.0-1065.75","4.15.0-1066.76","4.15.0-1067.77","4.15.0-1069.79","4.15.0-1073.83","4.15.0-1076.86","4.15.0-1079.89","4.15.0-1080.90","4.15.0-1081.91","4.15.0-1087.97","4.15.0-1090.100","4.15.0-1091.101","4.15.0-1093.103","4.15.0-1094.104","4.15.0-1096.106","4.15.0-1097.107","4.15.0-1099.109","4.15.0-1100.110","4.15.0-1101.112","4.15.0-1102.113","4.15.0-1103.114"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-oracle-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.0-1007.12~18.04.1","5.0.0-1008.13~18.04.1","5.0.0-1009.14~18.04.1","5.0.0-1010.15~18.04.1","5.0.0-1011.16","5.0.0-1013.18","5.0.0-1014.19"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"linux-oracle-5.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1011.12~18.04.1","5.3.0-1013.14~18.04.1","5.3.0-1014.15~18.04.1","5.3.0-1016.18~18.04.1","5.3.0-1018.20~18.04.1","5.3.0-1024.26~18.04.1","5.3.0-1027.29~18.04.1","5.3.0-1028.30~18.04.1","5.3.0-1030.32~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-aws-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.0-1038.40~20.04.1"}]}],"versions":["5.8.0-1035.37~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.0-1036.38~20.04.1"}]}],"versions":["5.8.0-1033.35~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gcp-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.0-1035.37~20.04.1"}]}],"versions":["5.8.0-1032.34~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-hwe-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.0-59.66~20.04.1"}]}],"versions":["5.8.0-23.24~20.04.1","5.8.0-25.26~20.04.1","5.8.0-28.30~20.04.1","5.8.0-29.31~20.04.1","5.8.0-31.33~20.04.1","5.8.0-33.36~20.04.1","5.8.0-34.37~20.04.2","5.8.0-36.40~20.04.1","5.8.0-38.43~20.04.1","5.8.0-40.45~20.04.1","5.8.0-41.46~20.04.1","5.8.0-43.49~20.04.1","5.8.0-44.50~20.04.1","5.8.0-45.51~20.04.1","5.8.0-48.54~20.04.1","5.8.0-49.55~20.04.1","5.8.0-50.56~20.04.1","5.8.0-53.60~20.04.1","5.8.0-55.62~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oem-5.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.10.0-1032.33"}]}],"versions":["5.10.0-1008.9","5.10.0-1011.12","5.10.0-1013.14","5.10.0-1014.15","5.10.0-1016.17","5.10.0-1017.18","5.10.0-1019.20","5.10.0-1021.22","5.10.0-1022.23","5.10.0-1023.24","5.10.0-1025.26","5.10.0-1026.27","5.10.0-1029.30"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oracle-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.0-1033.34~20.04.1"}]}],"versions":["5.8.0-1031.32~20.04.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-riscv-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.0-29.31~20.04.1"}]}],"versions":["5.8.0-14.16~20.04.1","5.8.0-14.16~20.04.3","5.8.0-16.18~20.04.1","5.8.0-17.19~20.04.1","5.8.0-18.20~20.04.1","5.8.0-20.22~20.04.1","5.8.0-22.24~20.04.1","5.8.0-25.27~20.04.1","5.8.0-26.28~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-raspi2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.3.0-1007.8","5.3.0-1014.16","5.3.0-1015.17","5.3.0-1017.19","5.4.0-1004.4","5.4.0-1006.6"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-riscv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.0-24.28","5.4.0-26.30","5.4.0-27.31","5.4.0-28.32","5.4.0-30.34","5.4.0-31.35","5.4.0-33.37","5.4.0-34.38","5.4.0-36.41","5.4.0-37.42","5.4.0-39.44","5.4.0-40.45"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-aws-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.0-1038.40~20.04.1"}]}],"versions":["5.8.0-1035.37~20.04.1"],"bundled":17},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-azure-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.0-1036.38~20.04.1"}]}],"versions":["5.8.0-1033.35~20.04.1"],"bundled":17},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-gcp-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.0-1035.37~20.04.1"}]}],"versions":["5.8.0-1032.34~20.04.1"],"bundled":17},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-hwe-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.0-59.66~20.04.1"}]}],"versions":["5.8.0-23.24~20.04.1","5.8.0-25.26~20.04.1","5.8.0-28.30~20.04.1","5.8.0-29.31~20.04.1","5.8.0-31.33~20.04.1","5.8.0-33.36~20.04.1","5.8.0-34.37~20.04.2","5.8.0-36.40~20.04.1","5.8.0-38.43~20.04.1","5.8.0-40.45~20.04.1","5.8.0-41.46~20.04.1","5.8.0-43.49~20.04.1","5.8.0-44.50~20.04.1","5.8.0-45.51~20.04.1","5.8.0-48.54~20.04.1","5.8.0-49.55~20.04.1","5.8.0-50.56~20.04.1","5.8.0-53.60~20.04.1","5.8.0-55.62~20.04.1"],"bundled":17},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oracle-5.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.8.0-1033.34~20.04.1"}]}],"versions":["5.8.0-1031.32~20.04.2"],"bundled":17},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"linux-oem-5.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.10.0-1033.34"}]}],"versions":["5.10.0-1008.9","5.10.0-1011.12","5.10.0-1013.14","5.10.0-1014.15","5.10.0-1016.17","5.10.0-1017.18","5.10.0-1019.20","5.10.0-1021.22","5.10.0-1022.23","5.10.0-1023.24","5.10.0-1025.26","5.10.0-1026.27","5.10.0-1029.30","5.10.0-1032.33"],"bundled":15}],"products":[{"vendor":"linux","product":"kernel"},{"vendor":"linux","product":"linux_kernel"},{"vendor":"netapp","product":"cloud_backup"},{"vendor":"netapp","product":"h300e_firmware"},{"vendor":"netapp","product":"h300s_firmware"},{"vendor":"netapp","product":"h410s_firmware"},{"vendor":"netapp","product":"h500e_firmware"},{"vendor":"netapp","product":"h500s_firmware"},{"vendor":"netapp","product":"h700e_firmware"},{"vendor":"netapp","product":"h700s_firmware"},{"vendor":"netapp","product":"solidfire_baseboard_management_controller_firmware"}],"references":[{"url":"https://www.zerodayinitiative.com/advisories/ZDI-21-503/","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","VDB Entry","advisory","report"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=10bf4e83167cc68595b85fd73bb91e8f2c086e36","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory","fix","article","report"]},{"url":"https://security.netapp.com/advisory/ntap-20210706-0003/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-31440","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-c57j-pq55-rh2x"},{"url":"https://vulners.com/cve/CVE-2019-14615","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-0427","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-24502","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-24503","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-24504","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-24586","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-24587","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-24588","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-26139","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-26140","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-26141","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-26143","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-26144","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-26145","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-26146","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-26147","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-27777","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-29368","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-29660","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-36158","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-36312","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-36386","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-0129","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-20194","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-20239","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-23133","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-28950","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-28971","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-29155","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-29646","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-29650","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-31440","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-31829","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-31916","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-33033","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-33200","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-3348","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-3489","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-3564","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-3573","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-3600","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-3635","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-3659","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-3679","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-3732","tags":["report"]},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2022-1644933991.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-31440","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2021-0214.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=28908","tags":["report"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.34","tags":["web"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.35","tags":["web"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.36","tags":["web"]},{"url":"https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.37","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2021-0215.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=28917","tags":["report"]},{"url":"https://source.android.com/security/bulletin/2022-06-01","tags":["advisory"]},{"url":"https://android.googlesource.com/kernel/common/+/10bf4e83167cc68595b85fd73bb91e8f2c086e36","tags":["fix"]},{"url":"https://access.redhat.com/errata/RHSA-2021:4140","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.5_release_notes/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1875275","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1902412","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1903244","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1905747","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1906522","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1912683","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1913348","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1919893","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1921958","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1923636","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1930376","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1930379","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1930381","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1941762","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1941784","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1945345","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1945388","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1946965","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1948772","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1951595","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1957788","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1959559","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1959642","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1959654","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1959657","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1959663","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1960490","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1960492","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1960496","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1960498","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1960500","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1960502","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1960504","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1964028","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1964139","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1965038","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1965458","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1966578","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1969489","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1975949","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1976946","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1981954","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1989165","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1995249","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4140.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-14615","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1789209","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-14615","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14615","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-0427","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-0427","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-0427","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-24502","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-24502","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-24502","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-24503","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-24503","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-24503","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-24504","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-24504","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-24504","tags":["advisory"]},{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00462.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-24586","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-24586","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-24586","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-wireless/20210511200110.3f8290e59823.I622a67769ed39257327a362cfc09c812320eb979@changeid/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-24587","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-24587","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-24587","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-24588","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-24588","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-24588","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-wireless/20210511200110.25d93176ddaf.I9e265b597f2cd23eb44573f35b625947b386a9de@changeid/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-26139","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-26139","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-26139","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-wireless/20210511200110.cb327ed0cabe.Ib7dcffa2a31f0913d660de65ba3c8aca75b1d10f@changeid/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-26140","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-26140","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-26140","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-26141","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-26141","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-26141","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-wireless/20210511200110.c3f1d42c6746.I795593fcaae941c471425b8c7d5f7bb185d29142@changeid/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-26143","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-26143","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-26143","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-26144","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-26144","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-26144","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-26145","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-26145","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-26145","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-wireless/20210511200110.9ca6ca7945a9.I1e18b514590af17c155bda86699bc3a971a8dcf4@changeid/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-26146","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-26146","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-26146","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-26147","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-26147","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-26147","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-wireless/20210511200110.30c4394bb835.I5acfdb552cc1d20c339c262315950b3eac491397@changeid/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-29368","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-29368","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-29368","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-29660","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-29660","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-29660","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-36158","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-36158","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-36158","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-36312","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1947991","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-36312","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-36312","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-36386","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-36386","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-36386","tags":["advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=51c19bf3d5cfaa66571e4b88ba2a6f6295311101","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-0129","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-0129","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-0129","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3348","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3348","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3348","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-block/24dff677353e2e30a71d8b66c4dffdbdf77c4dbd.1611595239.git.josef@toxicpanda.com/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3489","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3489","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3489","tags":["advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf.git/commit/?id=4b81ccebaeee885ab1aa1438133f2991e3a2b6ea","tags":["article"]},{"url":"https://www.openwall.com/lists/oss-security/2021/05/11/10","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3564","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3564","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3564","tags":["advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2021/05/25/1","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3573","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3573","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3573","tags":["advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth.git/commit/?id=e305509e678b3a4af2b3cfd410f409f7cdaabb52","tags":["article"]},{"url":"https://www.openwall.com/lists/oss-security/2021/06/08/2","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3600","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3600","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3600","tags":["advisory"]},{"url":"https://lore.kernel.org/patchwork/patch/1379497/","tags":["article"]},{"url":"https://www.openwall.com/lists/oss-security/2021/06/23/1","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3635","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3635","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3635","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3659","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3659","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3659","tags":["advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1165affd484889d4986cf3b724318935a0b120d8","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3679","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3679","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3679","tags":["advisory"]},{"url":"https://lore.kernel.org/lkml/20210723125527.767d1c18@oasis.local.home/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3732","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3732","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3732","tags":["advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=427215d85e8d","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-20194","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-20194","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-20194","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-20239","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-20239","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-20239","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-23133","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-23133","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-23133","tags":["advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b166a20b07382b8bc1dcee2a448715c9c2c81b5b","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-28950","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-28950","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-28950","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-28971","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-28971","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-28971","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-29155","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-29155","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-29155","tags":["advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2021/04/18/4","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-29646","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-29646","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-29646","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-29650","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-29650","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-29650","tags":["advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=175e476b8cdf2a4de7432583b49c871345e4f8a1","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-31440","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-31440","tags":["advisory","report"]},{"url":"https://www.zerodayinitiative.com/blog/2021/5/26/cve-2021-31440-an-incorrect-bounds-calculation-in-the-linux-kernel-ebpf-verifier","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-31829","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-31829","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-31829","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-31916","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-31916","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-31916","tags":["advisory"]},{"url":"https://github.com/torvalds/linux/commit/4edbe1d7bcffcd6269f3b5eb63f710393ff2ec7a","tags":["article"]},{"url":"https://seclists.org/oss-sec/2021/q1/268","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-33033","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1961300","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-33033","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-33033","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-33200","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-33200","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-33200","tags":["advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf.git/patch/?id=3d0220f6861d713213b015b582e9f21e5b28d2e0","tags":["article"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf.git/patch/?id=a7036191277f9fa68d92f2071ddc38c09b1e5ee5","tags":["article"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf.git/patch/?id=bb01a1bba579b4b1c5566af24d95f1767859771e","tags":["article"]},{"url":"https://www.openwall.com/lists/oss-security/2021/05/27/1","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-46905","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2266253","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-46905","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-46905","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2024022557-CVE-2021-46905-6507@gregkh/T","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-20166","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2122089","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-20166","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-20166","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:4356","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1509204","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1793880","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1816493","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1894101","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1900844","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1915825","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1933527","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1939341","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1953847","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1954588","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1960708","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1965360","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1971101","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1972278","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1974627","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1975182","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1976679","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1976699","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1976969","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1977162","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1977422","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1977537","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1977850","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1978369","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1979070","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1979680","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1986138","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1989999","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1991976","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1992700","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1996854","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4356.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-15794","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1831055","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-15794","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-15794","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-27777","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-27777","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-27777","tags":["advisory"]},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux.git/commit/?h=next\u0026id=bd59380c5ba4147dcbaad3e582b55ccfd120b764","tags":["article"]},{"url":"https://www.openwall.com/lists/oss-security/2020/10/09/1","tags":["article"]},{"url":"https://www.openwall.com/lists/oss-security/2020/11/23/2","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3444","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1942667","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3444","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3444","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-4442","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2308455","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-4442","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4442","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2024082945-CVE-2021-4442-0a5f@gregkh/T","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-29657","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1995153","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-29657","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-29657","tags":["advisory"]},{"url":"https://bugs.chromium.org/p/project-zero/issues/detail?id=2177","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-33098","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2068236","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-33098","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-33098","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-46983","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2266906","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-46983","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-46983","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2024022824-CVE-2021-46983-f808@gregkh/T/#u","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-47011","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2266847","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-47011","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-47011","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2024022831-CVE-2021-47011-5b75@gregkh/T/#u","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-47080","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2267533","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-47080","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-47080","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2024030142-CVE-2021-47080-eb20@gregkh/T/#u","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-47226","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2282591","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-47226","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-47226","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2024052137-CVE-2021-47226-5d4f@gregkh/T","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-50042","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2373691","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-50042","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-50042","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2025061843-CVE-2022-50042-7d6f@gregkh/T","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-50073","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2373494","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-50073","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-50073","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2025061854-CVE-2022-50073-7199@gregkh/T","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-53578","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2401492","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-53578","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-53578","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2025100455-CVE-2023-53578-7dbf@gregkh/T","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-53598","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2401500","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-53598","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-53598","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2025100429-CVE-2023-53598-cbd8@gregkh/T","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-53607","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2401517","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-53607","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-53607","tags":["advisory"]},{"url":"https://lore.kernel.org/linux-cve-announce/2025100432-CVE-2023-53607-9638@gregkh/T","tags":["article"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213360-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1187054","tags":["report"]},{"url":"https://bugzilla.suse.com/1188613","tags":["report"]},{"url":"https://bugzilla.suse.com/1190118","tags":["report"]},{"url":"https://bugzilla.suse.com/1190127","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-31440","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3573","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3640","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38160","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2021-31440","tags":["report"]},{"url":"https://git.kernel.org/linus/10bf4e83167cc68595b85fd73bb91e8f2c086e36","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4997-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4999-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5001-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4997-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-24586","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-24587","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-24588","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25670","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25671","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25672","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25673","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-26139","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-26141","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-26145","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-26147","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-3609","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-23133","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-29155","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-31829","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-33200","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-3506","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-3543","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-23134","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-32399","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-33034","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2021-31440","description":"This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.11.15. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of eBPF programs. The issue results from the lack of proper validation of user-supplied eBPF programs prior to executing them. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the kernel. Was ZDI-CAN-13661.","status":"published","published":"2021-05-21T14:30:14Z","modified":"2024-08-03T22:55:53.733Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-682"],"updated_at":"2026-11-02T14:33:05.331617Z"}],"euvd":[{"id":"EUVD-2021-18340","description":"This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.11.15. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of eBPF programs. The issue results from the lack of proper validation of user-supplied eBPF programs prior to executing them. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the kernel. Was ZDI-CAN-13661.","status":"published","published":"2021-05-21T14:30:14Z","modified":"2024-08-03T22:55:53Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T03:24:39.559154Z"}],"ghsa":[{"id":"GHSA-c57j-pq55-rh2x","title":"This vulnerability allows local attackers to escalate privileges on affected installations of...","description":"This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.11.15. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of eBPF programs. The issue results from the lack of proper validation of user-supplied eBPF programs prior to executing them. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the kernel. Was ZDI-CAN-13661.","status":"published","published":"2022-05-24T19:02:57Z","modified":"2023-01-29T05:06:44Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-682"],"updated_at":"2026-11-02T14:46:05.419939Z"}],"nvd":[{"id":"CVE-2021-31440","description":"This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.11.15. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of eBPF programs. The issue results from the lack of proper validation of user-supplied eBPF programs prior to executing them. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the kernel. Was ZDI-CAN-13661.","status":"published","published":"2021-05-21T15:15:07.75Z","modified":"2026-06-17T03:51:46.93Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":6.9,"vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-682"],"updated_at":"2026-11-02T14:06:53.987491Z"}],"osv":[{"id":"CVE-2021-31440","description":"This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.11.15. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of eBPF programs. The issue results from the lack of proper validation of user-supplied eBPF programs prior to executing them. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the kernel. Was ZDI-CAN-13661.","status":"published","published":"2021-05-21T15:15:07.75Z","modified":"2026-04-16T04:37:08.188722257Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:19.483607Z"},{"id":"DEBIAN-CVE-2021-31440","description":"This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.11.15. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of eBPF programs. The issue results from the lack of proper validation of user-supplied eBPF programs prior to executing them. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the kernel. Was ZDI-CAN-13661.","status":"published","published":"2021-05-21T15:15:07.75Z","modified":"2026-10-23T18:04:49.829540125Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:34.94143Z"},{"id":"RHSA-2021:4140","title":"Red Hat Security Advisory: kernel-rt security and bug fix update","status":"published","published":"2024-09-13T23:13:13Z","modified":"2026-08-14T10:01:48Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:4356","title":"Red Hat Security Advisory: kernel security, bug fix, and enhancement update","status":"published","published":"2024-09-16T05:32:57Z","modified":"2026-10-02T10:01:28Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"UBUNTU-CVE-2021-31440","description":"This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.11.15. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of eBPF programs. The issue results from the lack of proper validation of user-supplied eBPF programs prior to executing them. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the kernel. Was ZDI-CAN-13661.","status":"published","published":"2021-05-21T15:15:00Z","modified":"2026-02-04T02:35:39.290728Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:27.332852Z"},{"id":"ALSA-2021:4356","title":"Moderate: kernel security, bug fix, and enhancement update","description":"The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n* kernel: out-of-bounds reads in pinctrl subsystem (CVE-2020-0427)\n* kernel: Improper input validation in some Intel(R) Ethernet E810 Adapter drivers (CVE-2020-24502)\n* kernel: Insufficient access control in some Intel(R) Ethernet E810 Adapter drivers (CVE-2020-24503)\n* kernel: Uncontrolled resource consumption in some Intel(R) Ethernet E810 Adapter drivers (CVE-2020-24504)\n* kernel: Fragmentation cache not cleared on reconnection (CVE-2020-24586)\n* kernel: Reassembling fragments encrypted under different keys (CVE-2020-24587)\n* kernel: wifi frame payload being parsed incorrectly as an L2 frame (CVE-2020-24588)\n* kernel: Forwarding EAPOL from unauthenticated wifi client (CVE-2020-26139)\n* kernel: accepting plaintext data frames in protected networks (CVE-2020-26140)\n* kernel: not verifying TKIP MIC of fragmented frames (CVE-2020-26141)\n* kernel: accepting fragmented plaintext frames in protected networks (CVE-2020-26143)\n* kernel: accepting unencrypted A-MSDU frames that start with RFC1042 header (CVE-2020-26144)\n* kernel: accepting plaintext broadcast fragments as full frames (CVE-2020-26145)\n* kernel: powerpc: RTAS calls can be used to compromise kernel integrity (CVE-2020-27777)\n* kernel: locking inconsistency in tty_io.c and tty_jobctrl.c can lead to a read-after-free (CVE-2020-29660)\n* kernel: buffer overflow in mwifiex_cmd_802_11_ad_hoc_start function via a long SSID value (CVE-2020-36158)\n* kernel: slab out-of-bounds read in hci_extended_inquiry_result_evt()  (CVE-2020-36386)\n* kernel: Improper access control in BlueZ may allow information disclosure vulnerability. (CVE-2021-0129)\n* kernel: Use-after-free in ndb_queue_rq() in drivers/block/nbd.c (CVE-2021-3348)\n* kernel: Linux kernel eBPF RINGBUF map oversized allocation (CVE-2021-3489)\n* kernel: double free in bluetooth subsystem when the HCI device initialization fails (CVE-2021-3564)\n* kernel: use-after-free in function hci_sock_bound_ioctl() (CVE-2021-3573)\n* kernel: eBPF 32-bit source register truncation on div/mod (CVE-2021-3600)\n* kernel: DoS in rb_per_cpu_empty() (CVE-2021-3679)\n* kernel: Mounting overlayfs inside an unprivileged user namespace can reveal files (CVE-2021-3732)\n* kernel: heap overflow in __cgroup_bpf_run_filter_getsockopt() (CVE-2021-20194)\n* kernel: Race condition in sctp_destroy_sock list_del (CVE-2021-23133)\n* kernel: fuse: stall on CPU can occur because a retry loop continually finds the same bad inode (CVE-2021-28950)\n* kernel: System crash in intel_pmu_drain_pebs_nhm in arch/x86/events/intel/ds.c (CVE-2021-28971)\n* kernel: protection can be bypassed to leak content of kernel memory (CVE-2021-29155)\n* kernel: improper input validation in tipc_nl_retrieve_key function in net/tipc/node.c (CVE-2021-29646)\n* kernel: lack a full memory barrier may lead to DoS (CVE-2021-29650)\n* kernel: local escalation of privileges in handling of eBPF programs (CVE-2021-31440)\n* kernel: protection of stack pointer against speculative pointer arithmetic can be bypassed to leak content of kernel memory (CVE-2021-31829)\n* kernel: out-of-bounds reads and writes due to enforcing incorrect limits for pointer arithmetic operations by BPF verifier (CVE-2021-33200)\n* kernel: reassembling encrypted fragments with non-consecutive packet numbers (CVE-2020-26146)\n* kernel: reassembling mixed encrypted/plaintext fragments (CVE-2020-26147)\n* kernel: the copy-on-write implementation can grant unintended write access because of a race condition in a THP mapcount check (CVE-2020-29368)\n* kernel: flowtable list del corruption with kernel BUG at lib/list_debug.c:50 (CVE-2021-3635)\n* kernel: NULL pointer dereference in llsec_key_alloc() in net/mac802154/llsec.c (CVE-2021-3659)\n* kernel: setsockopt System Call Untrusted Pointer Dereference Information Disclosure (CVE-2021-20239)\n* kernel: out of bounds array access in drivers/md/dm-ioctl.c (CVE-2021-31916)","status":"published","published":"2021-11-09T09:08:02Z","modified":"2026-10-29T11:12:08.703144131Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"CLSA-2022-1644933991","title":"Fix of CVE: CVE-2021-31440, CVE-2022-0435","description":"- tipc: improve size validations for received domain records (Jon Maloy) {CVE-2022-0435}\n- bpf: Fix propagation of 32 bit unsigned bounds from 64 bit bounds (Yauheni Kaliuta) {CVE-2021-31440}\n- bpf: Fix propagation of 32-bit signed bounds from 64-bit bounds (Yauheni Kaliuta) {CVE-2021-31440}","status":"published","published":"2022-02-16T15:22:12Z","modified":"2026-06-01T00:33:19.100357894Z","updated_at":"2026-11-02T15:43:39.801198Z"},{"id":"MGASA-2021-0214","title":"Updated kernel packages fix security vulnerabilities","description":"This kernel update is based on upstream 5.10.37 and fixes at least the\nfollowing security issues:\n\nIt was discovered that the io_uring implementation of the Linux kernel did\nnot properly enforce the MAX_RW_COUNT limit in some situations. A local\nattacker could use this to cause a denial of service (system crash) or\nexecute arbitrary code (CVE-2021-3491).\n\nAn out-of-bounds (OOB) memory access flaw was found in fs/f2fs/node.c in\nthe f2fs module in the Linux kernel in versions before 5.12.0-rc4. A bounds\ncheck failure allows a local attacker to gain access to out-of-bounds\nmemory leading to a system crash or a leak of internal kernel information\n(CVE-2021-3506).\n\nA race condition in Linux kernel SCTP sockets (net/sctp/socket.c) before\n5.12-rc8 can lead to kernel privilege escalation from the context of a\nnetwork service or an unprivileged process. If sctp_destroy_sock is called\nwithout sock_net(sk)-\u003esctp.addr_wq_lock then an element is removed from\nthe auto_asconf_splist list without any proper locking. This can be\nexploited by an attacker with network service privileges to escalate to\nroot or from the context of an unprivileged user directly if a\nBPF_CGROUP_INET_SOCK_CREATE is attached which denies creation of some\nSCTP socket. \nNOTE! This already had a fix in kernel-5.10.33, but that fix caused some\nsystems to deadlock, so this is now fixed in a better way (CVE-2021-23133).\n\nbpf: Fix propagation of 32 bit unsigned bounds from 64 bit bounds\n(CVE-2021-31440).\n\nkernel/bpf/verifier.c in the Linux kernel through 5.12.1 performs undesirable\nspeculative loads, leading to disclosure of stack content via side-channel\nattacks. The specific concern is not protecting the BPF stack area against\nspeculative loads. Also, the BPF stack can contain uninitialized data that\nmight represent sensitive information previously operated on by the kernel\n(CVE-2021-31829).\n\nnet/bluetooth/hci_request.c in the Linux kernel through 5.12.2 has a race\ncondition for removal of the HCI controller (CVE-2021-32399).\n\nIn the Linux kernel before 5.12.4, net/bluetooth/hci_event.c has a\nuse-after-free when destroying an hci_chan. This leads to writing an\narbitrary value. (CVE-2021-33034).\n\nOther fixes in this update:\n- Revert upstream iommu/vt-d fixes causing systems to hang at boot:\n  * \"iommu/vt-d: Preset Access/Dirty bits for IOVA over FL\"\n  * \"iommu/vt-d: Remove WO permissions on second-level paging entries\"\n- Revert \"irqbypass: do not start cons/prod when failed connect\" as\n  it may cause VM freeze on arm64 with GICv4\n- ACPI / EC: Fix media keys not working problem on more Asus laptops\n- ACPI: PM: Add ACPI ID of Alder Lake Fan\n- iwlwifi: add new pci id for 6235\n- usb: xhci: Add reset resume quirk for AMD xhci controller\n- usb: xhci: Increase timeout for HC halt\n\nFor other upstream fixes, see the referenced changelogs.\n","status":"published","published":"2021-05-19T19:29:59Z","modified":"2026-04-16T04:42:26.435138584Z","updated_at":"2026-11-02T15:49:41.509337Z"},{"id":"MGASA-2021-0215","title":"Updated kernel-linus packages fix security vulnerabilities","description":"This kernel-linus update is based on upstream 5.10.37 and fixes at least the\nfollowing security issues:\n\nIt was discovered that the io_uring implementation of the Linux kernel did\nnot properly enforce the MAX_RW_COUNT limit in some situations. A local\nattacker could use this to cause a denial of service (system crash) or\nexecute arbitrary code (CVE-2021-3491).\n\nAn out-of-bounds (OOB) memory access flaw was found in fs/f2fs/node.c in\nthe f2fs module in the Linux kernel in versions before 5.12.0-rc4. A bounds\ncheck failure allows a local attacker to gain access to out-of-bounds\nmemory leading to a system crash or a leak of internal kernel information\n(CVE-2021-3506).\n\nA race condition in Linux kernel SCTP sockets (net/sctp/socket.c) before\n5.12-rc8 can lead to kernel privilege escalation from the context of a\nnetwork service or an unprivileged process. If sctp_destroy_sock is called\nwithout sock_net(sk)-\u003esctp.addr_wq_lock then an element is removed from\nthe auto_asconf_splist list without any proper locking. This can be\nexploited by an attacker with network service privileges to escalate to\nroot or from the context of an unprivileged user directly if a\nBPF_CGROUP_INET_SOCK_CREATE is attached which denies creation of some\nSCTP socket. \nNOTE! This already had a fix in kernel-5.10.33, but that fix caused some\nsystems to deadlock, so this is now fixed in a better way (CVE-2021-23133).\n\nbpf: Fix propagation of 32 bit unsigned bounds from 64 bit bounds\n(CVE-2021-31440).\n\nkernel/bpf/verifier.c in the Linux kernel through 5.12.1 performs undesirable\nspeculative loads, leading to disclosure of stack content via side-channel\nattacks. The specific concern is not protecting the BPF stack area against\nspeculative loads. Also, the BPF stack can contain uninitialized data that\nmight represent sensitive information previously operated on by the kernel\n(CVE-2021-31829).\n\nnet/bluetooth/hci_request.c in the Linux kernel through 5.12.2 has a race\ncondition for removal of the HCI controller (CVE-2021-32399).\n\nIn the Linux kernel before 5.12.4, net/bluetooth/hci_event.c has a\nuse-after-free when destroying an hci_chan. This leads to writing an\narbitrary value. (CVE-2021-33034).\n\nFor other upstream fixes, see the referenced changelogs.\n","status":"published","published":"2021-05-19T19:29:59Z","modified":"2026-04-16T04:41:26.250898979Z","updated_at":"2026-11-02T15:49:41.509337Z"},{"id":"PUB-A-189614572","description":"In __reg_combine_64_into_32 of verifier.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.","status":"published","published":"2022-06-01T00:00:00Z","modified":"2026-11-10T17:02:23.040266809Z","updated_at":"2026-11-10T17:35:07.907985Z"},{"id":"SUSE-SU-2021:3360-1","title":"Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP3)","description":"This update for the Linux Kernel 5.3.18-57 fixes several issues.\n\nThe following security issues were fixed:\n\n- CVE-2021-31440: Fixed a lack of proper validation of user-supplied eBPF programs prior to executing them. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the kernel. (bsc#1190127).\n- CVE-2021-38160: Fixed a bug that could lead to a data corruption or loss. This can be triggered by an untrusted device that supplies a buf-\u003elen value exceeding the buffer size in drivers/char/virtio_console.c (bsc#1190118)\n- CVE-2021-3640: Fixed a user-after-free bug in the function sco_sock_sendmsg which could lead to local privilege escalation. (bsc#1188613)\n- CVE-2021-3573: Fixed a user-after-free bug in the function hci_sock_bound_ioctl which could lead to local privilege escalation. (bsc#1187054).\n","status":"published","published":"2021-10-12T12:02:15Z","modified":"2025-05-02T04:31:25.117488Z","updated_at":"2026-11-02T15:53:49.605187Z"},{"id":"USN-4999-1","title":"linux, linux-aws, linux-aws-5.8, linux-azure, linux-azure-5.8, linux-gcp, linux-gcp-5.8, linux-hwe-5.8, linux-kvm, linux-oracle, linux-oracle-5.8, linux-raspi vulnerabilities","description":"Norbert Slusarek discovered a race condition in the CAN BCM networking\nprotocol of the Linux kernel leading to multiple use-after-free\nvulnerabilities. A local attacker could use this issue to execute arbitrary\ncode. (CVE-2021-3609)\n\nPiotr Krysiuk discovered that the eBPF implementation in the Linux kernel\ndid not properly enforce limits for pointer operations. A local attacker\ncould use this to cause a denial of service (system crash) or possibly\nexecute arbitrary code. (CVE-2021-33200)\n\nMathy Vanhoef discovered that the Linux kernel’s WiFi implementation did\nnot properly clear received fragments from memory in some situations. A\nphysically proximate attacker could possibly use this issue to inject\npackets or expose sensitive information. (CVE-2020-24586)\n\nMathy Vanhoef discovered that the Linux kernel’s WiFi implementation\nincorrectly handled encrypted fragments. A physically proximate attacker\ncould possibly use this issue to decrypt fragments. (CVE-2020-24587)\n\nMathy Vanhoef discovered that the Linux kernel’s WiFi implementation\nincorrectly handled certain malformed frames. If a user were tricked into\nconnecting to a malicious server, a physically proximate attacker could use\nthis issue to inject packets. (CVE-2020-24588)\n\nKiyin (尹亮) discovered that the NFC LLCP protocol implementation in the\nLinux kernel contained a reference counting error. A local attacker could\nuse this to cause a denial of service (system crash). (CVE-2020-25670)\n\nKiyin (尹亮) discovered that the NFC LLCP protocol implementation in the\nLinux kernel did not properly deallocate memory in certain error\nsituations. A local attacker could use this to cause a denial of service\n(memory exhaustion). (CVE-2020-25671, CVE-2020-25672)\n\nKiyin (尹亮) discovered that the NFC LLCP protocol implementation in the\nLinux kernel did not properly handle error conditions in some situations,\nleading to an infinite loop. A local attacker could use this to cause a\ndenial of service. (CVE-2020-25673)\n\nMathy Vanhoef discovered that the Linux kernel’s WiFi implementation\nincorrectly handled EAPOL frames from unauthenticated senders. A physically\nproximate attacker could inject malicious packets to cause a denial of\nservice (system crash). (CVE-2020-26139)\n\nMathy Vanhoef discovered that the Linux kernel’s WiFi implementation did\nnot properly verify certain fragmented frames. A physically proximate\nattacker could possibly use this issue to inject or decrypt packets.\n(CVE-2020-26141)\n\nMathy Vanhoef discovered that the Linux kernel’s WiFi implementation\naccepted plaintext fragments in certain situations. A physically proximate\n attacker could use this issue to inject packets. (CVE-2020-26145)\n\nMathy Vanhoef discovered that the Linux kernel’s WiFi implementation could\nreassemble mixed encrypted and plaintext fragments. A physically proximate\nattacker could possibly use this issue to inject packets or exfiltrate\n selected fragments. (CVE-2020-26147)\n\nOr Cohen discovered that the SCTP implementation in the Linux kernel\ncontained a race condition in some situations, leading to a use-after-free\ncondition. A local attacker could use this to cause a denial of service\n(system crash) or possibly execute arbitrary code. (CVE-2021-23133)\n\nPiotr Krysiuk and Benedict Schlueter discovered that the eBPF\nimplementation in the Linux kernel performed out of bounds speculation on\npointer arithmetic. A local attacker could use this to expose sensitive\ninformation. (CVE-2021-29155)\n\nManfred Paul discovered that the extended Berkeley Packet Filter (eBPF)\nimplementation in the Linux kernel contained an out-of-bounds\nvulnerability. A local attacker could use this issue to execute arbitrary\ncode. (CVE-2021-31440)\n\nPiotr Krysiuk discovered that the eBPF implementation in the Linux kernel\ndid not properly prevent speculative loads in certain situations. A local\nattacker could use this to expose sensitive information (kernel memory).\n(CVE-2021-31829)\n","status":"published","published":"2021-06-23T02:52:44Z","modified":"2026-06-03T14:04:23.025909303Z","updated_at":"2026-11-02T16:58:15.683829Z"},{"id":"USN-5001-1","title":"linux-oem-5.10 vulnerabilities","description":"Norbert Slusarek discovered a race condition in the CAN BCM networking\nprotocol of the Linux kernel leading to multiple use-after-free\nvulnerabilities. A local attacker could use this issue to execute arbitrary\ncode. (CVE-2021-3609)\n\nMathy Vanhoef discovered that the Linux kernel’s WiFi implementation did\nnot properly clear received fragments from memory in some situations. A\nphysically proximate attacker could possibly use this issue to inject\npackets or expose sensitive information. (CVE-2020-24586)\n\nMathy Vanhoef discovered that the Linux kernel’s WiFi implementation\nincorrectly handled encrypted fragments. A physically proximate attacker\ncould possibly use this issue to decrypt fragments. (CVE-2020-24587)\n\nMathy Vanhoef discovered that the Linux kernel’s WiFi implementation\nincorrectly handled certain malformed frames. If a user were tricked into\nconnecting to a malicious server, a physically proximate attacker could use\nthis issue to inject packets. (CVE-2020-24588)\n\nMathy Vanhoef discovered that the Linux kernel’s WiFi implementation\nincorrectly handled EAPOL frames from unauthenticated senders. A physically\nproximate attacker could inject malicious packets to cause a denial of\nservice (system crash). (CVE-2020-26139)\n\nMathy Vanhoef discovered that the Linux kernel’s WiFi implementation did\nnot properly verify certain fragmented frames. A physically proximate\nattacker could possibly use this issue to inject or decrypt packets.\n(CVE-2020-26141)\n\nMathy Vanhoef discovered that the Linux kernel’s WiFi implementation\naccepted plaintext fragments in certain situations. A physically proximate\nattacker could use this issue to inject packets. (CVE-2020-26145)\n\nMathy Vanhoef discovered that the Linux kernel’s WiFi implementation could\nreassemble mixed encrypted and plaintext fragments. A physically proximate\nattacker could possibly use this issue to inject packets or exfiltrate\nselected fragments. (CVE-2020-26147)\n\nOr Cohen discovered that the SCTP implementation in the Linux kernel\ncontained a race condition in some situations, leading to a use-after-free\ncondition. A local attacker could use this to cause a denial of service\n(system crash) or possibly execute arbitrary code. (CVE-2021-23133)\n\nOr Cohen and Nadav Markus discovered a use-after-free vulnerability in the\nnfc implementation in the Linux kernel. A privileged local attacker could\nuse this issue to cause a denial of service (system crash) or possibly\nexecute arbitrary code. (CVE-2021-23134)\n\nManfred Paul discovered that the extended Berkeley Packet Filter (eBPF)\nimplementation in the Linux kernel contained an out-of-bounds\nvulnerability. A local attacker could use this issue to execute arbitrary\ncode. (CVE-2021-31440)\n\nIt was discovered that a race condition in the kernel Bluetooth subsystem\ncould lead to use-after-free of slab objects. An attacker could use this\nissue to possibly execute arbitrary code. (CVE-2021-32399)\n\nIt was discovered that a use-after-free existed in the Bluetooth HCI driver\nof the Linux kernel. A local attacker could use this to cause a denial of\nservice (system crash) or possibly execute arbitrary code. (CVE-2021-33034)\n\nIt was discovered that an out-of-bounds (OOB) memory access flaw existed in\nthe f2fs module of the Linux kernel. A local attacker could use this issue\nto cause a denial of service (system crash). (CVE-2021-3506)\n\nMathias Krause discovered that a null pointer dereference existed in the\nNitro Enclaves kernel driver of the Linux kernel. A local attacker could\nuse this issue to cause a denial of service or possibly execute arbitrary\ncode. (CVE-2021-3543)\n","status":"published","published":"2021-06-23T03:45:22Z","modified":"2026-06-03T14:03:57.327887772Z","updated_at":"2026-11-02T16:58:15.683829Z"}]}}