CVE-2021-4135: Infoleak
A memory leak vulnerability was found in the Linux kernel's eBPF for the Simulated networking device driver in the way user uses BPF for the device such that function nsimmapallocelem being called. A local user could use this flaw to get unauthorized access to some data.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.22-1Fixed in 6.12.25-1
Event History
Frequently Asked Questions
What is the severity of CVE-2021-4135?
CVE-2021-4135 is classified as a high severity memory leak vulnerability in the Linux kernel.
How do I fix CVE-2021-4135?
To mitigate CVE-2021-4135, upgrade to Linux kernel versions 5.10.223-1, 5.10.226-1, or any later versions.
Who is affected by CVE-2021-4135?
CVE-2021-4135 affects Linux kernel versions up to 5.16 and includes several release candidates.
What impact does CVE-2021-4135 have?
CVE-2021-4135 allows a local user to potentially leak sensitive data, leading to unauthorized access.
When was CVE-2021-4135 disclosed?
CVE-2021-4135 was last updated on 29 November 2021.