The eBPF RINGBUF bpf_ringbuf_reserve() function in the Linux kernel did not check that the allocated size was smaller than the ringbuf size, allowing an attacker to perform out-of-bounds writes within the kernel and therefore, arbitrary code execution. This issue was fixed via commit 4b81ccebaeee ("bpf, ringbuf: Deny reserve of buffers larger than ringbuf") (v5.13-rc4) and backported to the stable kernels in v5.12.4, v5.11.21, and v5.10.37. It was introduced via 457f44363a88 ("bpf: Implement BPF ring buffer and verifier support for it") (v5.8-rc1).
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Jun 4, 2021 |
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-headersUpgrade kernelUpgrade python-perf-debuginfoUpgrade bpftoolUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-devel | Jul 4, 2022 | Jun 4, 2021 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 10, 2021 | Jun 4, 2021 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 4, 2021 |
| Oracle_linux | — | Upgrade kernel | Nov 18, 2021 | May 11, 2021 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 10, 2021 | Jun 4, 2021 |
| Suse | — | Upgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-default-develUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-azure-develUpgrade kernel-syms-azureUpgrade cluster-md-kmp-azureUpgrade kernel-symsUpgrade kernel-debugUpgrade kernel-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-zfcpdumpUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-64kb-develUpgrade dlm-kmp-azureUpgrade kernel-preemptUpgrade ocfs2-kmp-preemptUpgrade kernel-azure-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade kernel-default-extraUpgrade kernel-64kb-optionalUpgrade kernel-sourceUpgrade kernel-macrosUpgrade kernel-docsUpgrade kernel-obs-qaUpgrade kernel-devel-azureUpgrade kernel-preempt-optionalUpgrade dlm-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-preempt-livepatch-develUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-preemptUpgrade dlm-kmp-preemptUpgrade reiserfs-kmp-64kbUpgrade kernel-debug-develUpgrade kernel-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-default-optionalUpgrade kernel-source-vanillaUpgrade kernel-64kb-extraUpgrade kernel-develUpgrade kernel-default-livepatchUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-obs-buildUpgrade kernel-default-baseUpgrade kernel-preempt-extraUpgrade kselftests-kmp-preemptUpgrade gfs2-kmp-azureUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-preemptUpgrade kernel-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade kernel-preempt-develUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-preemptUpgrade gfs2-kmp-default | Jun 16, 2021 | May 11, 2021 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.8.0-1024-raspi-nolpaeUpgrade linux-image-gcpUpgrade linux-image-oem-20.04Upgrade linux-image-generic-64kUpgrade linux-image-5.11.0-1007-kvmUpgrade linux-image-5.11.0-17-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-5.8.0-1029-oracleUpgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.8.0-53-genericUpgrade linux-image-5.8.0-1032-azureUpgrade linux-image-5.8.0-53-generic-lpaeUpgrade linux-image-5.11.0-1005-azureUpgrade linux-image-5.10.0-1026-oemUpgrade linux-image-5.8.0-53-generic-64kUpgrade linux-image-virtualUpgrade linux-image-5.8.0-1031-gcpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.8.0-53-lowlatencyUpgrade linux-image-5.11.0-17-generic-64kUpgrade linux-image-genericUpgrade linux-image-5.8.0-1033-awsUpgrade linux-image-azureUpgrade linux-image-5.11.0-1007-awsUpgrade linux-image-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.11.0-1007-gcpUpgrade linux-image-5.11.0-17-generic-lpaeUpgrade linux-image-5.8.0-1024-raspiUpgrade linux-image-raspiUpgrade linux-image-5.8.0-1027-kvmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.11.0-17-genericUpgrade linux-image-5.11.0-1008-raspi-nolpaeUpgrade linux-image-5.11.0-1006-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-5.11.0-1008-raspi | May 12, 2021 | May 11, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 4, 2021 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub