kernel/bpf/verifier.c in the Linux kernel before 4.20.6 performs undesirable out-of-bounds speculation on pointer arithmetic in various cases, including cases of different branches with different state or limits to sanitize, leading to side-channel attacks.
CVSS Details
- CVSS 3.1 Base Score: 5.6
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-4.14.231-173.360Upgrade kernel-tools-develUpgrade perf-debuginfoUpgrade perfUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-headers | Apr 27, 2020 | Feb 1, 2019 |
| Amazon_linux | — | Upgrade kernel | May 7, 2019 | Feb 1, 2019 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 1, 2019 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 22, 2020 | Jan 3, 2019 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade kernel-devel-azureUpgrade kernel-default-manUpgrade kernel-azure-baseUpgrade kernel-source-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-default | Apr 1, 2019 | Feb 1, 2019 |
| Ubuntu | — | Upgrade linux-image-genericUpgrade linux-image-4.15.0-1035-awsUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1029-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-4.18.0-1014-azureUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.18.0-1008-gcpUpgrade linux-image-4.18.0-17-generic-lpaeUpgrade linux-image-4.15.0-47-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-4.15.0-47-genericUpgrade linux-image-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-virtualUpgrade linux-image-4.15.0-47-generic-lpaeUpgrade linux-image-4.18.0-1012-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-oemUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-47-snapdragonUpgrade linux-image-4.15.0-1031-kvmUpgrade linux-image-4.18.0-17-genericUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1041-azureUpgrade linux-image-4.18.0-1011-raspi2Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-gkeUpgrade linux-image-azureUpgrade linux-image-4.18.0-17-snapdragonUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1035-oemUpgrade linux-image-4.18.0-1009-kvmUpgrade linux-image-4.15.0-1033-raspi2Upgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1010-oracleUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-snapdragonUpgrade linux-image-4.18.0-17-lowlatency | Apr 5, 2019 | Feb 1, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub