ID:8596 - Exploit for Type Confusion in Linux kernel - CVE-2021-33624

Link to public exploit:

Vulnerability description

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists due to a type confusion error within kernel/bpf/verifier.c in the Linux kernel. A an unprivileged BPF program can read arbitrary memory locations via a side-channel attack.

Remediation