CVE-2021-46908: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: bpf: Use correct permission flag for mixed signed bounds arithmetic We forbid adding unknown scalars with mixed signed bounds due to the spectre v1 masking mitigation. Hence this also needs bypass_spec_v1 flag instead of allow_ptr_leaks.

Affected products

• Linux Linux Kernel: from 5.8.0, before 5.10.32 (fixed in 5.10.32); from 5.11.0, before 5.11.16 (fixed in 5.11.16)

Published 2024-02-27. Last modified 2026-08-04.