Skip to content

kernel CVE-2021-43267

High
cbgbt published GHSA-vcv5-pc8f-xmhp Dec 4, 2021

Package

kernel (bottlerocket)

Affected versions

< 1.4.2

Patched versions

1.4.2

Description

A flaw was discovered in the cryptographic receive code in the Linux kernel's implementation of transparent interprocess communication. An attacker, with the ability to send TIPC messages to the target, can corrupt memory and escalate privileges on the target system.

Severity

High

CVE ID

CVE-2021-43267

Weaknesses

No CWEs