CVE-2021-4135
MEDIUMLinux Kernel < 5.16 - Memory Leak in eBPF Simulated Networking Device Driver
Title source: llmDescription
A memory leak vulnerability was found in the Linux kernel's eBPF for the Simulated networking device driver in the way user uses BPF for the device such that function nsim_map_alloc_elem being called. A local user could use this flaw to get unauthorized access to some data.
References (1)
Core 1
Core References
Mailing List, Patch, Vendor Advisory x_refsource_misc
https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=481221775d53
Scores
CVSS v3
5.5
EPSS
0.0023
EPSS Percentile
13.2%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Details
CWE
CWE-200
CWE-401
Status
published
Products (2)
linux/linux_kernel
5.16 (6 CPE variants)
linux/linux_kernel
< 5.16
Published
Jul 14, 2022
Tracked Since
Feb 18, 2026