AZL-6551
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-6551.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-6551
- Upstream
- Published
- 2021-03-30T21:15:14Z
- Modified
- 2026-04-21T04:37:37.835077Z
- Severity
-
- 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- CVE-2021-29648 affecting package kernel for versions less than 5.10.78.1-1
- Details
-
An issue was discovered in the Linux kernel before 5.11.11. The BPF subsystem does not properly consider that resolvedids and resolvedsizes are intentionally uninitialized in the vmlinux BPF Type Format (BTF), which can cause a system crash upon an unexpected access attempt (in mapcreate in kernel/bpf/syscall.c or checkbtf_info in kernel/bpf/verifier.c), aka CID-350a5c4dd245.
- References