CVE-2021-3490
High · 7.8CVSS
7.8
EPSS
27.4%
Published
Jun 4, 2021
CISA due date
—
The record
The eBPF ALU32 bounds tracking for bitwise ops (AND, OR and XOR) in the Linux kernel did not properly update 32-bit bounds, which could be turned into out of bounds reads and writes in the Linux kernel and therefore, arbitrary code execution. This issue was fixed via commit 049c4e13714e ("bpf: Fix alu32 const subreg bound tracking on bitwise operations") (v5.13-rc4) and backported to the stable kernels in v5.12.4, v5.11.21, and v5.10.37. The AND/OR issues were introduced by commit 3f50f132d840 ("bpf: Verifier, do explicit ALU32 bounds tracking") (5.7-rc1) and the XOR variant was introduced by 2921c90d4718 ("bpf:Fix a verifier failure with xor") ( 5.10-rc1).
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Android | :linux_kernel: | :0 | :2021-10-05 |
| Debian:11 | linux | 0 | 5.10.38-1 |
| Debian:12 | linux | 0 | 5.10.38-1 |
| Debian:13 | linux | 0 | 5.10.38-1 |
| SUSE:Linux Enterprise High Availability Extension 15 SP3 | kernel-default | 0 | 5.3.18-59.5.2 |
| SUSE:Linux Enterprise Live Patching 15 SP3 | kernel-default | 0 | 5.3.18-59.5.2 |
| SUSE:Linux Enterprise Live Patching 15 SP3 | kernel-livepatch-SLE15-SP3_Update_0 | 0 | 2-3.1 |
| SUSE:Linux Enterprise Live Patching 15 SP3 | kernel-livepatch-SLE15-SP3_Update_1 | 0 | 1-7.5.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP3 | kernel-64kb | 0 | 5.3.18-59.5.2 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP3 | kernel-default | 0 | 5.3.18-59.5.2 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP3 | kernel-default-base | 0 | 5.3.18-59.5.2.18.2.2 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP3 | kernel-preempt | 0 | 5.3.18-59.5.2 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP3 | kernel-source | 0 | 5.3.18-59.5.2 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP3 | kernel-zfcpdump | 0 | 5.3.18-59.5.2 |
| SUSE:Linux Enterprise Module for Development Tools 15 SP3 | kernel-docs | 0 | 5.3.18-59.5.2 |
| SUSE:Linux Enterprise Module for Development Tools 15 SP3 | kernel-obs-build | 0 | 5.3.18-59.5.1 |
| SUSE:Linux Enterprise Module for Development Tools 15 SP3 | kernel-preempt | 0 | 5.3.18-59.5.2 |
| SUSE:Linux Enterprise Module for Development Tools 15 SP3 | kernel-source | 0 | 5.3.18-59.5.2 |
| SUSE:Linux Enterprise Module for Development Tools 15 SP3 | kernel-syms | 0 | 5.3.18-59.5.1 |
| SUSE:Linux Enterprise Module for Legacy 15 SP3 | kernel-default | 0 | 5.3.18-59.5.2 |
| SUSE:Linux Enterprise Module for Public Cloud 15 SP3 | kernel-azure | 0 | 5.3.18-38.3.1 |
| SUSE:Linux Enterprise Module for Public Cloud 15 SP3 | kernel-source-azure | 0 | 5.3.18-38.3.1 |
| SUSE:Linux Enterprise Module for Public Cloud 15 SP3 | kernel-syms-azure | 0 | 5.3.18-38.3.1 |
| SUSE:Linux Enterprise Workstation Extension 15 SP3 | kernel-default | 0 | 5.3.18-59.5.2 |
| SUSE:Linux Enterprise Workstation Extension 15 SP3 | kernel-preempt | 0 | 5.3.18-59.5.2 |
| Ubuntu:16.04:LTS | linux-hwe-edge | 0 | No fix |
| Ubuntu:18.04:LTS | linux-aws-5.0 | 0 | No fix |
| Ubuntu:18.04:LTS | linux-aws-5.3 | 0 | No fix |
| Ubuntu:18.04:LTS | linux-azure | 0 | No fix |
| Ubuntu:18.04:LTS | linux-azure-5.3 | 0 | No fix |
| Ubuntu:18.04:LTS | linux-azure-edge | 0 | No fix |
| Ubuntu:18.04:LTS | linux-gcp | 0 | No fix |
| Ubuntu:18.04:LTS | linux-gcp-5.3 | 0 | No fix |
| Ubuntu:18.04:LTS | linux-gcp-edge | 0 | No fix |
| Ubuntu:18.04:LTS | linux-hwe | 0 | No fix |
| Ubuntu:18.04:LTS | linux-hwe-edge | 0 | No fix |
| Ubuntu:18.04:LTS | linux-ibm-5.4 | 0 | 5.4.0-1010.11~18.04.2 |
| Ubuntu:18.04:LTS | linux-oracle-5.0 | 0 | No fix |
| Ubuntu:18.04:LTS | linux-oracle-5.3 | 0 | No fix |
| Ubuntu:20.04:LTS | linux-aws-5.11 | 0 | 5.11.0-1009.9~20.04.2 |
| Ubuntu:20.04:LTS | linux-aws-5.13 | 0 | 5.13.0-1008.9~20.04.2 |
| Ubuntu:20.04:LTS | linux-aws-5.15 | 0 | 5.15.0-1014.18~20.04.1 |
| Ubuntu:20.04:LTS | linux-aws-5.8 | 0 | 5.8.0-1035.37~20.04.1 |
| Ubuntu:20.04:LTS | linux-azure-5.11 | 0 | 5.11.0-1007.7~20.04.2 |
| Ubuntu:20.04:LTS | linux-azure-5.13 | 0 | 5.13.0-1009.10~20.04.2 |
| Ubuntu:20.04:LTS | linux-azure-5.15 | 0 | 5.15.0-1007.8~20.04.1 |
| Ubuntu:20.04:LTS | linux-azure-5.8 | 0 | 5.8.0-1033.35~20.04.1 |
| Ubuntu:20.04:LTS | linux-azure-fde-5.15 | 0 | 5.15.0-1019.24~20.04.1.1 |
| Ubuntu:20.04:LTS | linux-bluefield | 0 | 5.4.0-1007.10 |
| Ubuntu:20.04:LTS | linux-gcp-5.11 | 0 | 5.11.0-1009.10~20.04.1 |
| Ubuntu:20.04:LTS | linux-gcp-5.13 | 0 | 5.13.0-1008.9~20.04.3 |
| Ubuntu:20.04:LTS | linux-gcp-5.15 | 0 | 5.15.0-1006.9~20.04.1 |
| Ubuntu:20.04:LTS | linux-gcp-5.8 | 0 | 5.8.0-1032.34~20.04.1 |
| Ubuntu:20.04:LTS | linux-gke | 0 | 5.4.0-1033.35 |
| Ubuntu:20.04:LTS | linux-gkeop-5.15 | 0 | 5.15.0-1003.5~20.04.2 |
| Ubuntu:20.04:LTS | linux-hwe-5.11 | 0 | 5.11.0-22.23~20.04.1 |
| Ubuntu:20.04:LTS | linux-hwe-5.13 | 0 | 5.13.0-21.21~20.04.1 |
| Ubuntu:20.04:LTS | linux-hwe-5.15 | 0 | 5.15.0-33.34~20.04.1 |
| Ubuntu:20.04:LTS | linux-hwe-5.8 | 0 | 5.8.0-53.60~20.04.1 |
| Ubuntu:20.04:LTS | linux-ibm | 0 | 5.4.0-1003.4 |
| Ubuntu:20.04:LTS | linux-ibm-5.15 | 0 | 5.15.0-1033.36~20.04.1 |
| Ubuntu:20.04:LTS | linux-intel-5.13 | 0 | 5.13.0-1007.7 |
| Ubuntu:20.04:LTS | linux-intel-iotg-5.15 | 0 | 5.15.0-1003.5~20.04.1 |
| Ubuntu:20.04:LTS | linux-iot | 0 | 5.4.0-1001.3 |
| Ubuntu:20.04:LTS | linux-lowlatency-hwe-5.15 | 0 | 5.15.0-33.34~20.04.1 |
| Ubuntu:20.04:LTS | linux-oem-5.10 | 0 | 5.10.0-1026.27 |
| Ubuntu:20.04:LTS | linux-oem-5.13 | 0 | 5.13.0-1009.10 |
| Ubuntu:20.04:LTS | linux-oem-5.14 | 0 | 5.14.0-1004.4 |
| Ubuntu:20.04:LTS | linux-oracle-5.11 | 0 | 5.11.0-1008.8~20.04.1 |
| Ubuntu:20.04:LTS | linux-oracle-5.13 | 0 | 5.13.0-1011.13~20.04.2 |
| Ubuntu:20.04:LTS | linux-oracle-5.15 | 0 | 5.15.0-1007.9~20.04.1 |
| Ubuntu:20.04:LTS | linux-oracle-5.8 | 0 | 5.8.0-1031.32~20.04.2 |
| Ubuntu:20.04:LTS | linux-raspi2 | 0 | No fix |
| Ubuntu:20.04:LTS | linux-riscv-5.11 | 0 | 5.11.0-1015.16~20.04.1 |
| Ubuntu:20.04:LTS | linux-riscv-5.15 | 0 | 5.15.0-1015.17~20.04.1 |
| Ubuntu:20.04:LTS | linux-riscv-5.8 | 0 | 5.8.0-25.27~20.04.1 |
| Ubuntu:20.04:LTS | linux-xilinx-zynqmp | 0 | 5.4.0-1020.24 |
| Ubuntu:22.04:LTS | linux | 0 | 5.13.0-19.19 |
| Ubuntu:22.04:LTS | linux-aws | 0 | 5.13.0-1005.6 |
| Ubuntu:22.04:LTS | linux-aws-6.5 | 0 | 6.5.0-1008.8~22.04.1 |
| Ubuntu:22.04:LTS | linux-azure | 0 | 5.13.0-1006.7 |
| Ubuntu:22.04:LTS | linux-azure-6.5 | 0 | 6.5.0-1007.7~22.04.1 |
| Ubuntu:22.04:LTS | linux-azure-fde | 0 | 5.15.0-1019.24.1 |
| Ubuntu:22.04:LTS | linux-gcp | 0 | 5.13.0-1005.6 |
| Ubuntu:22.04:LTS | linux-gcp-6.5 | 0 | 6.5.0-1010.10~22.04.3 |
| Ubuntu:22.04:LTS | linux-gke | 0 | 5.15.0-1002.2 |
| Ubuntu:22.04:LTS | linux-gkeop | 0 | 5.15.0-1001.2 |
| Ubuntu:22.04:LTS | linux-hwe-6.5 | 0 | 6.5.0-14.14~22.04.1 |
| Ubuntu:22.04:LTS | linux-ibm | 0 | 5.15.0-1002.2 |
| Ubuntu:22.04:LTS | linux-intel-iotg | 0 | 5.15.0-1004.6 |
| Ubuntu:22.04:LTS | linux-kvm | 0 | 5.13.0-1004.4 |
| Ubuntu:22.04:LTS | linux-lowlatency | 0 | 5.15.0-22.22 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.5 | 0 | 6.5.0-14.14.1~22.04.1 |
| Ubuntu:22.04:LTS | linux-nvidia | 0 | 5.15.0-1005.5 |
| Ubuntu:22.04:LTS | linux-nvidia-6.5 | 0 | 6.5.0-1004.4 |
| Ubuntu:22.04:LTS | linux-oem-5.17 | 0 | 5.17.0-1003.3 |
| Ubuntu:22.04:LTS | linux-oem-6.0 | 0 | 6.0.0-1006.6 |
| Ubuntu:22.04:LTS | linux-oem-6.5 | 0 | 6.5.0-1003.3 |
| Ubuntu:22.04:LTS | linux-oracle | 0 | 5.13.0-1008.10 |
| Ubuntu:22.04:LTS | linux-oracle-6.5 | 0 | 6.5.0-1013.13~22.04.4 |
| Ubuntu:22.04:LTS | linux-raspi | 0 | 5.13.0-1008.9 |
| Ubuntu:22.04:LTS | linux-riscv | 0 | 5.13.0-1004.4 |
| Ubuntu:22.04:LTS | linux-riscv-6.5 | 0 | 6.5.0-17.17.1.1~22.04.1 |
| Ubuntu:22.04:LTS | linux-starfive-6.5 | 0 | 6.5.0-1007.8~22.04.1 |
| Ubuntu:22.04:LTS | linux-xilinx-zynqmp | 0 | 5.15.0-1022.26 |
| Ubuntu:24.04:LTS | linux | 0 | 6.5.0-9.9 |
| Ubuntu:24.04:LTS | linux-aws | 0 | 6.5.0-1008.8 |
| Ubuntu:24.04:LTS | linux-azure | 0 | 6.5.0-1007.7 |
| Ubuntu:24.04:LTS | linux-gcp | 0 | 6.5.0-1007.7 |
| Ubuntu:24.04:LTS | linux-gke | 0 | 6.8.0-1003.5 |
| Ubuntu:24.04:LTS | linux-gkeop | 0 | 6.8.0-1001.3 |
| Ubuntu:24.04:LTS | linux-ibm | 0 | 6.5.0-1009.9 |
| Ubuntu:24.04:LTS | linux-lowlatency | 0 | 6.5.0-9.9.1 |
| Ubuntu:24.04:LTS | linux-nvidia | 0 | 6.8.0-1007.7 |
| Ubuntu:24.04:LTS | linux-oem-6.8 | 0 | 6.8.0-1003.3 |
| Ubuntu:24.04:LTS | linux-oracle | 0 | 6.5.0-1010.10 |
| Ubuntu:24.04:LTS | linux-raspi | 0 | 6.5.0-1005.7 |
| Ubuntu:24.04:LTS | linux-riscv | 0 | 6.5.0-9.9.1 |
| Ubuntu:Pro:16.04:LTS | linux-hwe-edge | 0 | No fix |
| Ubuntu:Pro:18.04:LTS | linux-aws-5.0 | 0 | No fix |
| Ubuntu:Pro:18.04:LTS | linux-aws-5.3 | 0 | No fix |
| Ubuntu:Pro:18.04:LTS | linux-azure | 0 | No fix |
| Ubuntu:Pro:18.04:LTS | linux-azure-5.3 | 0 | No fix |
| Ubuntu:Pro:18.04:LTS | linux-azure-edge | 0 | No fix |
| Ubuntu:Pro:18.04:LTS | linux-gcp | 0 | No fix |
| Ubuntu:Pro:18.04:LTS | linux-gcp-5.3 | 0 | No fix |
| Ubuntu:Pro:18.04:LTS | linux-gcp-edge | 0 | No fix |
| Ubuntu:Pro:18.04:LTS | linux-hwe | 0 | No fix |
| Ubuntu:Pro:18.04:LTS | linux-hwe-edge | 0 | No fix |
| Ubuntu:Pro:18.04:LTS | linux-oracle-5.0 | 0 | No fix |
| Ubuntu:Pro:18.04:LTS | linux-oracle-5.3 | 0 | No fix |
| Ubuntu:Pro:20.04:LTS | linux-raspi2 | 0 | No fix |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | linux-aws-fips | 0 | 4.15.0-2000.4 |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | linux-azure-fips | 0 | 4.15.0-1002.2 |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | linux-fips | 0 | 4.15.0-1027.32 |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | linux-gcp-fips | 0 | 4.15.0-2013.14 |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | linux-aws-fips | 0 | 5.4.0-1021.21+fips2 |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | linux-azure-fips | 0 | 5.4.0-1022.22+fips1 |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | linux-fips | 0 | 5.4.0-1026.30 |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | linux-gcp-fips | 0 | 5.4.0-1021.21+fips1 |
| Ubuntu:Pro:FIPS:16.04:LTS | linux-fips | 0 | 4.4.0-1003.3 |
| Ubuntu:Pro:FIPS:18.04:LTS | linux-aws-fips | 0 | 4.15.0-2000.4 |
| Ubuntu:Pro:FIPS:18.04:LTS | linux-azure-fips | 0 | 4.15.0-1002.2 |
| Ubuntu:Pro:FIPS:18.04:LTS | linux-fips | 0 | 4.15.0-1011.12 |
| Ubuntu:Pro:FIPS:18.04:LTS | linux-gcp-fips | 0 | 4.15.0-1001.1 |
| Ubuntu:Pro:FIPS:20.04:LTS | linux-aws-fips | 0 | 5.4.0-1021.21+fips2 |
| Ubuntu:Pro:FIPS:20.04:LTS | linux-azure-fips | 0 | 5.4.0-1022.22+fips1 |
| Ubuntu:Pro:FIPS:20.04:LTS | linux-fips | 0 | 5.4.0-1007.8 |
| Ubuntu:Pro:FIPS:20.04:LTS | linux-gcp-fips | 0 | 5.4.0-1021.21+fips1 |
| openSUSE:Leap 15.3 | kernel-64kb | 0 | 5.3.18-59.5.2 |
| openSUSE:Leap 15.3 | kernel-azure | 0 | 5.3.18-38.3.1 |
| openSUSE:Leap 15.3 | kernel-debug | 0 | 5.3.18-59.5.2 |
| openSUSE:Leap 15.3 | kernel-default | 0 | 5.3.18-59.5.2 |
| openSUSE:Leap 15.3 | kernel-default-base | 0 | 5.3.18-59.5.2.18.2.2 |
| openSUSE:Leap 15.3 | kernel-docs | 0 | 5.3.18-59.5.2 |
| openSUSE:Leap 15.3 | kernel-kvmsmall | 0 | 5.3.18-59.5.2 |
| openSUSE:Leap 15.3 | kernel-obs-build | 0 | 5.3.18-59.5.1 |
| openSUSE:Leap 15.3 | kernel-obs-qa | 0 | 5.3.18-59.5.1 |
| openSUSE:Leap 15.3 | kernel-preempt | 0 | 5.3.18-59.5.2 |
| openSUSE:Leap 15.3 | kernel-source | 0 | 5.3.18-59.5.2 |
| openSUSE:Leap 15.3 | kernel-source-azure | 0 | 5.3.18-38.3.1 |
| openSUSE:Leap 15.3 | kernel-syms | 0 | 5.3.18-59.5.1 |
| openSUSE:Leap 15.3 | kernel-syms-azure | 0 | 5.3.18-38.3.1 |
| openSUSE:Leap 15.3 | kernel-zfcpdump | 0 | 5.3.18-59.5.2 |
| openSUSE:Tumbleweed | kernel-source | 0 | 5.14.6-1.4 |
| openSUSE:Tumbleweed | kernel-source | 0 | 6.6.17-1.1 |
Related vulnerabilities
- CVE-2025-38500 In the Linux kernel, the following vulnerability has been resolved: xfrm: interface: fix… Also affects :linux_kernel:
- CVE-2025-38352 In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix… Also affects :linux_kernel:
- CVE-2025-38349 In the Linux kernel, the following vulnerability has been resolved: eventpoll: don't… Also affects :linux_kernel:
- CVE-2025-38236 In the Linux kernel, the following vulnerability has been resolved: af_unix: Don't leave… Also affects :linux_kernel:
- CVE-2025-21756 In the Linux kernel, the following vulnerability has been resolved: vsock: Keep the… Also affects :linux_kernel:
- CVE-2025-21701 In the Linux kernel, the following vulnerability has been resolved: net: avoid race… Also affects :linux_kernel:
- CVE-2024-56556 In the Linux kernel, the following vulnerability has been resolved: binder: fix node UAF… Also affects :linux_kernel:
- CVE-2024-53197 In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix… Also affects :linux_kernel: