CVE-2021-3444

Aliases:UBUNTU-CVE-2021-3444DEBIAN-CVE-2021-3444
Advisory lineage Upstream: 0 Downstream: 29
Modified
Published: 23 Mar 2021, 17:45
Last modified:16 Sept 2024, 17:27

Vulnerability Summary

Overall Risk (default)
medium
31/100
CVSS Score
7.8 HIGH
v3.1 (cve.org)
EPSS Score
0.61% LOW
1% probability +0.53%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

23 Mar 2021, 17:45
Published
Vulnerability first disclosed
16 Sept 2024, 17:27
Last Modified
Vulnerability information updated

Description

The bpf verifier in the Linux kernel did not properly handle mod32 destination register truncation when the source register was known to be 0. A local attacker with the ability to load bpf programs could use this gain out-of-bounds reads in kernel memory leading to information disclosure (kernel memory), and possibly out-of-bounds writes that could potentially lead to code execution. This issue was addressed in the upstream kernel in commit 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero") and in Linux stable kernels 5.11.2, 5.10.19, and 5.4.101.

CVSS Metrics

  • v3.1•HIGH•Score: 7.8CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
  • v3.1•HIGH•Score: 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • v2.0•MEDIUM•Score: 4.6AV:L/AC:L/Au:N/C:P/I:P/A:P

EPSS Trends

Current EPSS score: 0.61%• Percentile: 48%

Techniques & Countermeasures

  • CWE-681•Incorrect Conversion between Numeric Types

    When converting from one data type to another, such as long to integer, data can be omitted or translated in a way that produces unexpected values. If the resulting values are used in a sensitive context, then dangerous behaviors may occur.

  • CWE-125•Out-of-bounds Read

    The product reads data past the end, or before the beginning, of the intended buffer.

Affected Systems

  • canonical•ubuntu_linux

    14.04 | 16.04 | 18.04 | 20.04

  • debian•linux

    < 5.10.19-1 | < 5.10.19-1 | < 5.10.19-1 | < 5.10.19-1

  • ubuntu•linux

    < 5.4.0-70.78

  • ubuntu•linux-aws

    < 5.4.0-1041.43

  • ubuntu•linux-aws-5.0

    all

  • ubuntu•linux-aws-5.3

    all

  • ubuntu•linux-aws-5.4

    < 5.4.0-1041.43~18.04.1

  • ubuntu•linux-aws-fips

    < 5.4.0-1069.73+fips2 | all

  • ubuntu•linux-azure

    all | < 5.4.0-1043.45

  • ubuntu•linux-azure-5.3

    all

  • ubuntu•linux-azure-5.4

    < 5.4.0-1043.45~18.04.1

  • ubuntu•linux-azure-edge

    all

  • ubuntu•linux-azure-fips

    < 5.4.0-1073.76+fips1 | all

  • ubuntu•linux-bluefield

    all

  • ubuntu•linux-gcp

    all | < 5.4.0-1040.43

  • ubuntu•linux-gcp-5.3

    all

  • ubuntu•linux-gcp-5.4

    < 5.4.0-1040.43~18.04.1

  • ubuntu•linux-gcp-edge

    all

  • ubuntu•linux-gcp-fips

    < 5.4.0-1067.71~20.04.1 | all

  • ubuntu•linux-gke

    < 5.4.0-1039.41

  • ubuntu•linux-gke-4.15

    all

  • ubuntu•linux-gke-5.3

    < 5.3.0-1041.44

  • ubuntu•linux-gke-5.4

    < 5.4.0-1039.41~18.04.1

  • ubuntu•linux-gkeop

    < 5.4.0-1012.13

  • ubuntu•linux-gkeop-5.4

    < 5.4.0-1012.13~18.04.1

  • ubuntu•linux-hwe

    < 5.3.0-72.68

  • ubuntu•linux-hwe-5.4

    < 5.4.0-70.78~18.04.1

  • ubuntu•linux-hwe-5.8

    < 5.8.0-48.54~20.04.1

  • ubuntu•linux-hwe-edge

    all | all

  • ubuntu•linux-intel-iot-realtime

    all

  • ubuntu•linux-kvm

    < 5.4.0-1036.37

  • ubuntu•linux-oem

    all

  • ubuntu•linux-oem-5.10

    < 5.10.0-1019.20

  • ubuntu•linux-oem-5.6

    < 5.6.0-1052.56

  • ubuntu•linux-oracle

    < 5.4.0-1041.44

  • ubuntu•linux-oracle-5.0

    all

  • ubuntu•linux-oracle-5.3

    all

  • ubuntu•linux-oracle-5.4

    < 5.4.0-1041.44~18.04.1

  • ubuntu•linux-raspi

    < 5.4.0-1032.35

  • ubuntu•linux-raspi-5.4

    < 5.4.0-1032.35~18.04.1

  • ubuntu•linux-raspi-realtime

    all

  • ubuntu•linux-raspi2

    all

  • ubuntu•linux-raspi2-5.3

    < 5.3.0-1038.40

  • ubuntu•linux-realtime

    all

  • ubuntu•linux-riscv

    all

  • ubuntu•linux-riscv-5.8

    < 5.8.0-20.22~20.04.1

  • debian•debian_linux

    9.0

  • linux•kernel

    ≥ trunk, < 5.12-rc1 | ≥ 5.11, < 5.11.2 | ≥ 5.10, < 5.10.19 | ≥ 5.4, < 5.4.101

  • linux•linux_kernel

    < 5.4.101 | ≥ 5.5.0, < 5.10.19 | ≥ 5.11, < 5.11.2

References (12)