VDB

GCVE-110-MAGEIA-2021-225

GCVE-110-MAGEIA-2021-225
Advisory Published
Vulnetix · Advisory published May 31, 2021
This kernel-linus update is based on upstream 5.10.41 and fixes at least the following security issue: kernel/bpf/verifier.c in the Linux kernel through 5.12.7 enforces incorrect limits for pointer arithmetic operations. This can be abused to perform out-of-bounds reads and writes in kernel memory, leading to local privilege escalation to root. In particular, there is a corner case where the off reg causes a masking direction change, which then results in an incorrect final aux->alu_limit (CVE-2021-33200). For other upstream fixes, see the referenced changelogs.

Affected Products

VendorProductVersionsPlatforms
Mageiakernel-linus0 (affected), 5.10.41-1.mga8 (unaffected)—
Mageiakernel-linus0 (affected), 5.10.41-1.mga7 (unaffected)—

Browse GCVE Records

21,084 records in the GCVE database · Updated October 20, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 50/day Open console ›