CVE-2021-45402: Medium severity linux kernel vulnerability
Last updated 24 July 2024
Other sources
The checkaluop() function in kernel/bpf/verifier.c in the Linux kernel through v5.16-rc5 did not properly update bounds while handling the mov32 instruction, which allows local users to obtain potentially sensitive address information, aka a "pointer leak."
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2021-45402?
CVE-2021-45402 is considered a medium severity vulnerability due to the potential for local users to exploit pointer leaks to access sensitive information.
How do I fix CVE-2021-45402?
To mitigate CVE-2021-45402, update your Linux kernel to a version beyond 5.16, such as 5.10.223-1, 6.1.123-1, or any later stable version.
Which Linux kernel versions are affected by CVE-2021-45402?
CVE-2021-45402 affects the Linux kernel versions up to 5.16, including release candidates 5.16-rc1 through 5.16-rc5.
What is the nature of the issue described in CVE-2021-45402?
CVE-2021-45402 involves a pointer leak due to improper handling of bounds in the check_alu_op() function in the Linux kernel's BPF verifier.
Who can exploit CVE-2021-45402?
CVE-2021-45402 can be exploited by local users with access to the vulnerable system, allowing them to obtain potentially sensitive address information.