The BPF subsystem in the Linux kernel before 4.17 mishandles situations with a long jump over an instruction sequence where inner instructions require substantial expansions into multiple BPF instructions, leading to an overflow. This affects kernel/bpf/core.c and net/core/filter.c.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-develUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-4.14.268-205.500Upgrade kernel-tools-develUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfoUpgrade perf-debuginfo | Jul 4, 2022 | Dec 8, 2021 |
| Amazon_linux | — | Upgrade kernel | Mar 9, 2022 | Dec 8, 2021 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Dec 8, 2021 |
| Suse | — | Upgrade kernel-vanillaUpgrade kernel-vanilla-baseUpgrade kernel-zfcpdump-manUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-vanilla-livepatch-develUpgrade kernel-default-manUpgrade kernel-debug-baseUpgrade kernel-vanilla-develUpgrade kernel-kvmsmall-baseUpgrade kernel-obs-build | Jan 14, 2022 | Dec 8, 2021 |
| Ubuntu | — | Upgrade linux-gcp-4.15Upgrade linux-kvmUpgrade linux-awsUpgrade linux-gcp-fipsUpgrade linux-azure-fipsUpgrade linux-gcpUpgrade linux-hweUpgrade linux-azure-4.15Upgrade linux-aws-fipsUpgrade linuxUpgrade linux-raspi2Upgrade linux-oracleUpgrade linux-dell300xUpgrade linux-fipsUpgrade linux-aws-hweUpgrade linux-azureUpgrade linux-snapdragon | Nov 19, 2024 | Dec 8, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 8, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub