kernel/bpf/verifier.c in the Linux kernel through 4.14.8 mishandles states_equal comparisons between the pointer data type and the UNKNOWN_VALUE data type, which allows local users to obtain. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.
Linux
Information Disclosure
Linux Kernel
Debian Linux
NVD
CVSS 3.0
3.3
EPSS
0.1%