Vulnerability in eBPF allowing code execution at the Linux kernel level
A vulnerability (CVE-2021-3600) has been identified in the eBPF subsystem, which allows the execution of handlers within the Linux kernel in a special JIT virtual machine, permitting a local unprivileged user to execute their code at the Linux kernel level. The issue is caused by improper truncation of 32-bit registers during 'div' and 'mod' operations, which may lead to reading and writing data outside the allocated memory area. […]
