Linux kernel (eBPF verifier): eBPF ALU32 bitwise-op bounds tracking flaw

CVE-2021-3490Kernel, userspace & hypervisorcurated

Impact

eBPF ALU32 bitwise-op bounds tracking flaw - arbitrary kernel read/write from unprivileged BPF

Who can reach it

Any tenant process in a container where unprivileged BPF is enabled

What to do

Livepatchable; otherwise drain + reboot. Durable control: kernel.unprivileged_bpf_disabled=1 fleet-wide

References

https://access.redhat.com/security/cve/CVE-2021-3490

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.