CVE-2021-47300

A vulnerability was found in the Linux kernel's BPF subsystem, due handling of BPF programs when the JIT compiler fails. If a failure occurs, the system may incorrectly handle tail calls, potentially causing out-of-bounds memory access. This flaw can lead to unpredictable behavior or system crashes if certain conditions are met during program execution.

This vulnerability is rated as a moderate severity because an out-of-bounds memory access, which could lead to crashes or unexpected behavior, but does not provide direct mechanisms for unauthorized access or data manipulation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.