{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2021-3600","assignerOrgId":"cc1ad9ee-3454-478d-9317-d3e869d708bc","state":"PUBLISHED","assignerShortName":"canonical","dateReserved":"2021-06-12T00:16:40.778Z","datePublished":"2024-01-08T18:16:42.087Z","dateUpdated":"2024-09-04T15:38:28.022Z"},"containers":{"cna":{"affected":[{"packageName":"linux","product":"linux","vendor":"The Linux Kernel Organization","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git","platforms":["Linux"],"versions":[{"lessThan":"5.11","status":"affected","version":"0","versionType":"semver"}]}],"descriptions":[{"lang":"en","value":"It was discovered that the eBPF implementation in the Linux kernel did not properly track bounds information for 32 bit registers when performing div and mod operations. A local attacker could use this to possibly execute arbitrary code."}],"references":[{"tags":["issue-tracking"],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3600"},{"tags":["third-party-advisory"],"url":"https://ubuntu.com/security/notices/USN-5003-1"},{"tags":["issue-tracking"],"url":"https://git.kernel.org/linus/e88b2c6e5a4d9ce30d75391e4d950da74bb2bd90"}],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH"}}],"providerMetadata":{"orgId":"cc1ad9ee-3454-478d-9317-d3e869d708bc","shortName":"canonical","dateUpdated":"2024-01-08T18:16:42.087Z"}},"adp":[{"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T17:01:07.551Z"},"title":"CVE Program Container","references":[{"tags":["issue-tracking","x_transferred"],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3600"},{"tags":["third-party-advisory","x_transferred"],"url":"https://ubuntu.com/security/notices/USN-5003-1"},{"tags":["issue-tracking","x_transferred"],"url":"https://git.kernel.org/linus/e88b2c6e5a4d9ce30d75391e4d950da74bb2bd90"}]},{"problemTypes":[{"descriptions":[{"type":"CWE","cweId":"CWE-125","lang":"en","description":"CWE-125 Out-of-bounds Read"}]},{"descriptions":[{"type":"CWE","cweId":"CWE-787","lang":"en","description":"CWE-787 Out-of-bounds Write"}]}],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"timestamp":"2024-03-13T19:37:54.684327Z","id":"CVE-2021-3600","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"title":"CISA ADP Vulnrichment","providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2024-09-04T15:38:28.022Z"}}]}}