Out-of-Bounds Affecting kernel-debuginfo-common-aarch64 package, versions <0:4.18.0-553.el8_10
Threat Intelligence
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-ROCKY8-KERNELDEBUGINFOCOMMONAARCH64-7261645
- published 15 Jun 2024
- disclosed 24 Aug 2022
Introduced: 24 Aug 2022
CVE-2021-4204 Open this link in a new tabHow to fix?
Upgrade Rocky-Linux:8 kernel-debuginfo-common-aarch64 to version 0:4.18.0-553.el8_10 or higher.
This issue was patched in RLSA-2024:3138.
NVD Description
Note: Versions mentioned in the description apply only to the upstream kernel-debuginfo-common-aarch64 package and not the kernel-debuginfo-common-aarch64 package as distributed by Rocky-Linux.
See How to fix? for Rocky-Linux:8 relevant fixed versions and status.
An out-of-bounds (OOB) memory access flaw was found in the Linux kernel's eBPF due to an Improper Input Validation. This flaw allows a local attacker with a special privilege to crash the system or leak internal information.
References
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4204
- https://access.redhat.com/security/cve/CVE-2021-4204
- https://bugzilla.redhat.com/show_bug.cgi?id=2039178
- https://security-tracker.debian.org/tracker/CVE-2021-4204
- https://security.netapp.com/advisory/ntap-20221228-0003/
- https://www.openwall.com/lists/oss-security/2022/01/11/4