In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because the protection mechanism neglects the possibility of uninitialized memory locations on the BPF stack.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.241-184.433Upgrade perfUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.59-52.142Upgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernelUpgrade python-perf-debuginfo | Aug 6, 2021 | Aug 2, 2021 |
| Debian | — | Upgrade linux | Nov 29, 2021 | Aug 2, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernelUpgrade python-perfUpgrade kernel-headers | Feb 24, 2022 | Aug 2, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools | Nov 12, 2021 | Aug 2, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 2, 2021 |
| Suse | — | Upgrade dtb-lgUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-preemptUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-freescaleUpgrade kernel-64kb-extraUpgrade kernel-azure-livepatch-develUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-baseUpgrade dtb-exynosUpgrade kernel-azure-extraUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-preemptUpgrade kernel-default-develUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-preempt-develUpgrade kernel-syms-azureUpgrade kernel-obs-buildUpgrade dtb-allwinnerUpgrade dlm-kmp-64kbUpgrade kgraft-patch-4_4_180-94_150-defaultUpgrade dtb-alteraUpgrade kernel-default-baseUpgrade dtb-marvellUpgrade kernel-azure-develUpgrade dtb-socionextUpgrade dtb-nvidiaUpgrade ocfs2-kmp-defaultUpgrade dtb-broadcomUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-azureUpgrade kernel-default-kgraftUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-azureUpgrade dlm-kmp-preemptUpgrade kernel-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-preempt-extraUpgrade kernel-source-azureUpgrade dtb-sprdUpgrade kernel-default-manUpgrade kernel-sourceUpgrade gfs2-kmp-preemptUpgrade kernel-vanilla-develUpgrade dtb-caviumUpgrade kernel-vanilla-livepatch-develUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-preemptUpgrade kselftests-kmp-defaultUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-defaultUpgrade kernel-docsUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-preemptUpgrade kernel-vanilla-baseUpgrade kernel-kvmsmallUpgrade kernel-preempt-optionalUpgrade kernel-default-optionalUpgrade dtb-armUpgrade cluster-md-kmp-preemptUpgrade cluster-md-kmp-azureUpgrade dtb-mediatekUpgrade kernel-develUpgrade kernel-64kb-optionalUpgrade kernel-devel-azureUpgrade kernel-zfcpdumpUpgrade dlm-kmp-defaultUpgrade dtb-zteUpgrade kernel-default-extraUpgrade kernel-macrosUpgrade dtb-xilinxUpgrade dtb-renesasUpgrade kernel-obs-qaUpgrade kernel-64kb-livepatch-develUpgrade dtb-amlogicUpgrade dtb-hisiliconUpgrade dtb-alUpgrade dtb-qcomUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-zfcpdump-manUpgrade kernel-preempt-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade dtb-rockchipUpgrade ocfs2-kmp-azureUpgrade kernel-symsUpgrade dtb-amdUpgrade kernel-default-livepatch-develUpgrade dtb-apmUpgrade kernel-debug-baseUpgrade reiserfs-kmp-defaultUpgrade kernel-vanilla | Sep 16, 2021 | Aug 2, 2021 |
| Ubuntu | — | Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.11.0-1017-kvmUpgrade linux-image-5.4.0-1049-kvmUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.11.0-1019-oracleUpgrade linux-image-genericUpgrade linux-image-azure-edgeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-bluefieldUpgrade linux-image-azure-lts-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1021-bluefieldUpgrade linux-image-raspi2Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-5.4.0-90-genericUpgrade linux-image-5.11.0-1020-gcpUpgrade linux-image-5.11.0-1019-raspiUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.4.0-1046-raspiUpgrade linux-image-ibmUpgrade linux-image-gkeopUpgrade linux-image-raspi-nolpaeUpgrade linux-image-virtualUpgrade linux-image-5.4.0-1055-gkeUpgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-90-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1007-ibmUpgrade linux-image-gkeUpgrade linux-image-5.11.0-37-genericUpgrade linux-image-gke-5.4Upgrade linux-image-5.11.0-37-generic-lpaeUpgrade linux-image-5.11.0-1019-raspi-nolpaeUpgrade linux-image-5.10.0-1050-oemUpgrade linux-image-5.13.0-1014-oemUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1057-gcpUpgrade linux-image-5.4.0-1063-azureUpgrade linux-image-5.11.0-1019-awsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1057-oracleUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-kvmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1026-gkeopUpgrade linux-image-oemUpgrade linux-image-5.4.0-90-lowlatencyUpgrade linux-image-5.4.0-1059-awsUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.11.0-37-generic-64kUpgrade linux-image-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.11.0-37-lowlatencyUpgrade linux-image-5.11.0-1017-azureUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-osp1Upgrade linux-image-oracle | Sep 28, 2021 | Aug 2, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub