CVE-2021-41864 Integer overflow in n/a

High 7.8 Published 1 Oct 2021 Updated 4 Aug 2024

Unprivileged users can trigger an integer overflow in the Linux kernel's eBPF stackmap, leading to an out-of-bounds write and potential privilege escalation.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: Available

What is CVE-2021-41864?

CVE-2021-41864 is a high-severity vulnerability in Debian Debian Linux, published on 1 Oct 2021. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

prealloc_elems_and_freelist in kernel/bpf/stackmap.c in the Linux kernel before 5.14.12 allows unprivileged users to trigger an eBPF multiplication integer overflow with a resultant out-of-bounds write.

Weakness: CWE-190

Which versions are affected by CVE-2021-41864?

It affects 15 products.

Linux distribution packages (7)

`kernel-livepatch-SLE15-SP2_Update_14` SUSE:Linux Enterprise Live Patching 15 SP2	All versions	`6-2.2`
`kernel-livepatch-SLE15-SP2_Update_16` SUSE:Linux Enterprise Live Patching 15 SP2	All versions	`6-2.2`
`kernel-livepatch-SLE15-SP2_Update_17` SUSE:Linux Enterprise Live Patching 15 SP2	All versions	`5-2.2`
`kernel-livepatch-SLE15-SP2_Update_18` SUSE:Linux Enterprise Live Patching 15 SP2	All versions	`4-2.2`
`kernel-livepatch-SLE15-SP2_Update_19` SUSE:Linux Enterprise Live Patching 15 SP2	All versions	`2-2.2`
`kernel-livepatch-SLE15-SP2_Update_20` SUSE:Linux Enterprise Live Patching 15 SP2	All versions	`2-2.3`
`kernel-livepatch-SLE15-SP3_Update_7` SUSE:Linux Enterprise Live Patching 15 SP3	All versions	`2-2.2`

Products include Debian Debian Linux, Fedoraproject Fedora, Linux kernel, Netapp Cloud Backup, Netapp H300e Firmware, Netapp H300s Firmware and 9 more.

How do I fix CVE-2021-41864?

Apply the vendor's patch.

Is CVE-2021-41864 being exploited?

There is no known exploitation of CVE-2021-41864 in the wild and no public exploit code.

All Debian Debian Linux vulnerabilities

Sources

Also known as A-202511260, AZL-6597, DEBIAN-CVE-2021-41864, GHSA-c376-w83c-8gx5, PUB-A-202511260, SUSE-SU-2021:3712-1 and 2 more.