AZL-6551

Dashboard / Vulnerabilities / AZL-6551

AZL-6551

Summary: CVE-2021-29648 affecting package kernel for versions less than 5.10.78.1-1

Details: An issue was discovered in the Linux kernel before 5.11.11. The BPF subsystem does not properly consider that resolved_ids and resolved_sizes are intentionally uninitialized in the vmlinux BPF Type Format (BTF), which can cause a system crash upon an unexpected access attempt (in map_create in kernel/bpf/syscall.c or check_btf_info in kernel/bpf/verifier.c), aka CID-350a5c4dd245.

References: https://nvd.nist.gov/vuln/detail/CVE-2021-29648