CVE-2021-45402: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.

The check_alu_op() function in kernel/bpf/verifier.c in the Linux kernel through v5.16-rc5 did not properly update bounds while handling the mov32 instruction, which allows local users to obtain potentially sensitive address information, aka a "pointer leak."

Affected products

• Linux Linux Kernel: before 5.16 (fixed in 5.16); version 5.16 only

Published 2022-02-11. Last modified 2026-10-08.