The eBPF RINGBUF bpf_ringbuf_reserve() function in the Linux kernel did not check that the allocated size was smaller than the ringbuf size, allowing an attacker to perform out-of-bounds writes within the kernel and therefore, arbitrary code execution. This issue was fixed via commit 4b81ccebaeee ("bpf, ringbuf: Deny reserve of buffers larger than ringbuf") (v5.13-rc4) and backported to the stable kernels in v5.12.4, v5.11.21, and v5.10.37. It was introduced via 457f44363a88 ("bpf: Implement BPF ring buffer and verifier support for it") (v5.8-rc1).
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Jun 4, 2021 |
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade perfUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo | Jul 4, 2022 | Jun 4, 2021 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 10, 2021 | Jun 4, 2021 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 4, 2021 |
| Oracle_linux | — | Upgrade kernel | Nov 18, 2021 | May 11, 2021 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 10, 2021 | Jun 4, 2021 |
| Suse | — | Upgrade kernel-zfcpdumpUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-docsUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade kernel-sourceUpgrade ocfs2-kmp-preemptUpgrade kernel-debug-livepatch-develUpgrade kernel-64kbUpgrade kernel-obs-qaUpgrade kernel-syms-azureUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-azureUpgrade kernel-64kb-optionalUpgrade kernel-macrosUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-preemptUpgrade kernel-devel-azureUpgrade dlm-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-azure-develUpgrade kernel-64kb-develUpgrade kernel-default-develUpgrade kernel-debugUpgrade kernel-kvmsmallUpgrade kernel-symsUpgrade kernel-azureUpgrade kernel-source-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-preempt-develUpgrade cluster-md-kmp-preemptUpgrade dlm-kmp-preemptUpgrade kernel-debug-develUpgrade kernel-defaultUpgrade kselftests-kmp-preemptUpgrade kernel-develUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-obs-buildUpgrade kernel-source-vanillaUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-preemptUpgrade kernel-preempt-optionalUpgrade reiserfs-kmp-preemptUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-preempt-livepatch-develUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-preempt-extraUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-baseUpgrade kernel-default-optional | Jun 16, 2021 | May 11, 2021 |
| Ubuntu | — | Upgrade linux-image-5.11.0-1007-gcpUpgrade linux-image-5.11.0-17-genericUpgrade linux-image-5.8.0-1027-kvmUpgrade linux-image-5.11.0-1008-raspi-nolpaeUpgrade linux-image-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-5.11.0-1006-oracleUpgrade linux-image-raspiUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.11.0-1008-raspiUpgrade linux-image-awsUpgrade linux-image-5.11.0-17-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.11.0-1007-awsUpgrade linux-image-5.8.0-1024-raspiUpgrade linux-image-5.11.0-17-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.8.0-1029-oracleUpgrade linux-image-5.8.0-53-generic-64kUpgrade linux-image-5.8.0-1033-awsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.8.0-53-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-5.8.0-1024-raspi-nolpaeUpgrade linux-image-5.8.0-53-genericUpgrade linux-image-5.8.0-1032-azureUpgrade linux-image-virtualUpgrade linux-image-5.8.0-1031-gcpUpgrade linux-image-5.11.0-1005-azureUpgrade linux-image-oem-20.04Upgrade linux-image-gkeUpgrade linux-image-5.8.0-53-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-5.11.0-1007-kvmUpgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.10.0-1026-oemUpgrade linux-image-oem-20.04bUpgrade linux-image-5.11.0-17-generic-64k | May 12, 2021 | May 11, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 4, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub