preallocelemsand_freelist in kernel/bpf/stackmap.c in the Linux kernel before 5.14.12 allows unprivileged users to trigger an eBPF multiplication integer overflow with a resultant out-of-bounds write.
{
"unresolved_ranges": [
{
"cpe": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "10.0"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "9.0"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "33"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "34"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "35"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"extracted_events": [
{
"fixed": "5.14.12"
}
],
"source": "CPE_FIELD"
},
{
"extracted_events": [
{
"fixed": "5.14.12"
}
],
"source": "DESCRIPTION"
}
]
}"2026-05-18T22:23:50Z"
[
{
"target": {
"file": "kernel/bpf/stackmap.c",
"function": "prealloc_elems_and_freelist"
},
"id": "CVE-2021-41864-2f0e15c3",
"signature_type": "Function",
"digest": {
"function_hash": "78331623464240500637050481890227317480",
"length": 472.0
},
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/30e29a9a2bc6a4888335a6ede968b75cd329657a",
"deprecated": false
},
{
"target": {
"file": "kernel/bpf/stackmap.c"
},
"id": "CVE-2021-41864-39de1582",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"138355671117931060601386443469335038030",
"21078963703448784961734780795509455909",
"307878453625655919730588976003179522762",
"90440858909143805989969151470339403945"
]
},
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/30e29a9a2bc6a4888335a6ede968b75cd329657a",
"deprecated": false
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-41864.json"