Back to Database
Status published
High
CVE-2021-3600
It was discovered that the eBPF implementation in the Linux...
Vulnerability Description
It was discovered that the eBPF implementation in the Linux kernel did not properly track bounds information for 32 bit registers when performing div and mod operations. A local attacker could use this to possibly execute arbitrary code.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-3600
Credits & Attribution
No credits recorded in the NVD database.
References
More from The Linux Kernel Organization
View All →CVE-2023-6040
An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables: Reject tables of unsupported family)
High
7.8
CVE-2023-1032
The Linux kernel io_uring IORING_OP_SOCKET operation contained a double free...
Medium
4.7
CVE-2022-2602
io_uring UAF, Unix SCM garbage collection...
Medium
5.3
CVE-2022-2588
It was discovered that the cls_route filter implementation in the...
Medium
5.3
CVE-2022-2586
It was discovered that a nft object or expression could...
Medium
5.3
Affected Vendor
The Linux Kernel Organization
View all reports →Affected Software
linux
Vulnerable Versions:
0
Timeline
Official Publish:
January 8th, 2024
Last Modified:
September 4th, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.