In kernel/bpf/verifier.c in the Linux kernel before 5.12.13, a branch can be mispredicted (e.g., because of type confusion) and consequently an unprivileged BPF program can read arbitrary memory locations via a side-channel attack, aka CID-9183671af6db.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernelUpgrade bpftoolUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-develUpgrade kernel-livepatch-4.14.238-182.421Upgrade kernel-tools-develUpgrade perf-debuginfo | Jul 19, 2021 | Jun 23, 2021 |
| Debian | — | Upgrade linux | Nov 29, 2021 | Jun 23, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-develUpgrade bpftoolUpgrade kernel-sourceUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-headersUpgrade perf | Sep 24, 2021 | Jun 23, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perf | Sep 29, 2021 | Jun 23, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 23, 2021 |
| Suse | — | Upgrade kernel-preempt-develUpgrade kernel-docsUpgrade gfs2-kmp-preemptUpgrade kernel-default-extraUpgrade kernel-kvmsmall-develUpgrade kernel-default-base-rebuildUpgrade kernel-zfcpdumpUpgrade dlm-kmp-azureUpgrade kernel-debugUpgrade kernel-default-livepatch-develUpgrade kernel-zfcpdump-manUpgrade ocfs2-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-debug-baseUpgrade kernel-sourceUpgrade gfs2-kmp-azureUpgrade kernel-64kb-develUpgrade cluster-md-kmp-preemptUpgrade kernel-vanilla-baseUpgrade kernel-symsUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-vanillaUpgrade kernel-preempt-optionalUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-default-optionalUpgrade kernel-preemptUpgrade kernel-obs-qaUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-defaultUpgrade kernel-preempt-livepatch-develUpgrade ocfs2-kmp-azureUpgrade kernel-develUpgrade kernel-debug-livepatch-develUpgrade kernel-source-vanillaUpgrade dlm-kmp-preemptUpgrade kernel-kvmsmall-baseUpgrade ocfs2-kmp-64kbUpgrade kernel-azureUpgrade kernel-debug-develUpgrade reiserfs-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-default-manUpgrade kernel-azure-develUpgrade kernel-devel-azureUpgrade kernel-64kb-extraUpgrade kernel-azure-optionalUpgrade kernel-default-develUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-preemptUpgrade ocfs2-kmp-preemptUpgrade kernel-vanilla-livepatch-develUpgrade kernel-64kbUpgrade kselftests-kmp-azureUpgrade kernel-azure-baseUpgrade kernel-azure-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-default-livepatchUpgrade gfs2-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade kernel-preempt-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-vanilla-develUpgrade kernel-source-azureUpgrade kernel-kvmsmallUpgrade kernel-default-baseUpgrade kselftests-kmp-preemptUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-macrosUpgrade kernel-docs-html | Jul 10, 2021 | Jun 23, 2021 |
| Ubuntu | — | Upgrade linux-image-gkeUpgrade linux-image-awsUpgrade linux-image-virtualUpgrade linux-image-5.4.0-1059-azureUpgrade linux-image-5.11.0-1017-azureUpgrade linux-image-kvmUpgrade linux-image-5.4.0-87-lowlatencyUpgrade linux-image-5.4.0-88-lowlatencyUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1053-gkeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-gke-5.4Upgrade linux-image-oracleUpgrade linux-image-5.11.0-1019-awsUpgrade linux-image-5.4.0-1053-gcpUpgrade linux-image-5.10.0-1050-oemUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1047-kvmUpgrade linux-image-5.4.0-87-genericUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.11.0-37-lowlatencyUpgrade linux-image-oem-20.04Upgrade linux-image-5.11.0-37-genericUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oemUpgrade linux-image-5.4.0-1057-awsUpgrade linux-image-5.11.0-37-generic-64kUpgrade linux-image-raspi2Upgrade linux-image-gcpUpgrade linux-image-5.11.0-37-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-5.11.0-1019-raspi-nolpaeUpgrade linux-image-5.4.0-1055-oracleUpgrade linux-image-gkeop-5.4Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-87-generic-lpaeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1024-gkeopUpgrade linux-image-5.11.0-1017-kvmUpgrade linux-image-5.4.0-1044-raspiUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-azure-edgeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-88-genericUpgrade linux-image-5.11.0-1020-gcpUpgrade linux-image-5.11.0-1019-raspiUpgrade linux-image-generic-64kUpgrade linux-image-5.4.0-88-generic-lpaeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.11.0-1019-oracle | Sep 28, 2021 | Jun 23, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 23, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub