CVE-2021-3489

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to v5.13-rc4 Linux kernel versions prior to v5.12.4 Linux kernel versions prior to v5.11.21 Linux kernel versions prior to v5.10.37

Description The eBPF RINGBUF bpf ringbuf reserve() function in the Linux kernel did not check that the allocated size was smaller than the ringbuf size, allowing an attacker to perform out-of-bounds writes within the kernel and therefore, arbitrary code execution. This issue allows an attacker to execute arbitrary code in the context of the kernel.

Recommendations For Linux kernel versions prior to v5.13-rc4, update to v5.13-rc4 or later to fix the issue. For Linux kernel versions prior to v5.12.4, update to v5.12.4 or later to fix the issue. For Linux kernel versions prior to v5.11.21, update to v5.11.21 or later to fix the issue. For Linux kernel versions prior to v5.10.37, update to v5.10.37 or later to fix the issue.