CVE-2021-4135: Infoleak
Published Jul 14, 2022
·Updated
A memory leak vulnerability was found in the Linux kernel's eBPF for the Simulated networking device driver in the way user uses BPF for the device such that function nsimmapallocelem being called. A local user could use this flaw to get unauthorized access to some data.
Affected Software
8 affected componentsFixes available
Linux Linux kernel<5.16
Linux Linux kernel=5.16
Linux Linux kernel=5.16-rc1
Linux Linux kernel=5.16-rc2
Linux Linux kernel=5.16-rc3
Linux Linux kernel=5.16-rc4
Linux Linux kernel=5.16-rc5
debian/linux
5.10.223-15.10.234-16.1.129-16.1.135-16.12.22-16.12.25-1
Remediation
Event History
Jul 14, 2022
CVE Published
via MITRE·07:30 PM
Data Sourced
via MITRE·07:30 PM
DescriptionWeakness
Jan 12, 2024
Data Sourced
via Launchpad·12:01 AM
Description
Apr 28, 2025
Data Sourced
via Ubuntu·04:30 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2021-4135?
CVE-2021-4135 is classified as a high severity memory leak vulnerability in the Linux kernel.
2
How do I fix CVE-2021-4135?
To mitigate CVE-2021-4135, upgrade to Linux kernel versions 5.10.223-1, 5.10.226-1, or any later versions.
3
Who is affected by CVE-2021-4135?
CVE-2021-4135 affects Linux kernel versions up to 5.16 and includes several release candidates.
4
What impact does CVE-2021-4135 have?
CVE-2021-4135 allows a local user to potentially leak sensitive data, leading to unauthorized access.
5
When was CVE-2021-4135 disclosed?
CVE-2021-4135 was last updated on 29 November 2021.