Description
An issue was discovered in the Linux kernel before 5.8.15. scalar32_min_max_or in kernel/bpf/verifier.c mishandles bounds tracking during use of 64-bit values, aka CID-5b9fbeb75b6a.
Exploits (2)
Scores
CVSS v3
5.5
EPSS
0.0433
EPSS Percentile
89.0%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-681
Status
published
Products (1)
linux/linux_kernel
< 5.8.15
Published
Oct 16, 2020
Tracked Since
Feb 18, 2026