CVE-2021-3490 log
| Source |
|
| Severity | Medium |
| Remote | No |
| Type | Arbitrary code execution |
| Description | A security issue was found in the Linux kernel before version 5.12.4. It was discovered that eBPF ALU32 bounds tracking for bitwise ops (AND, OR and XOR) did not update the 32-bit bounds, leading to out-of-bounds reads and writes in the kernel. |
| Group | Package | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|---|
| AVG-1961 | linux-lts | 5.10.36-2 | 5.10.37-1 | Medium | Fixed | |
| AVG-1960 | linux-hardened | 5.11.20.hardened1-2 | 5.11.21.hardened1-1 | Medium | Fixed | |
| AVG-1959 | linux-zen | 5.12.3.zen2-1 | 5.12.4.zen1-1 | Medium | Fixed | |
| AVG-1958 | linux | 5.12.3.arch2-1 | 5.12.4.arch1-1 | Medium | Fixed |