A security researcher released exploit code for a high-severity vulnerability in Linux kernel eBPF (Extended Berkeley Packet Filter) that can give an attacker increased privileges on Ubuntu machines. The bug is tracked as CVE-2021-3490. It was disclosed in May and is a privilege escalation, so leveraging it requires local access on the target machine. The researcher created proof-of-concept exploit code and published it on GitHub. The PoC is designed for Groovy Gorilla kernels 5.8.0-25.26 and Hirsute Hippo kernel version 5.11-16.17.
Source: https://www.bleepingcomputer.com/news/security/linux-ebpf-bug-gets-root-privileges-on-ubuntu-exploit-released/

