arch/mips/net/bpf_jit.c in the Linux kernel before 5.4.10 can generate undesirable machine code when transforming unprivileged cBPF programs, allowing execution of arbitrary code within the kernel context. This occurs because conditional branches can exceed the 128 KB limit of the MIPS architecture.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade microvm-kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade microvm-kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-headersUpgrade kernel-develUpgrade microvm-kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade microvm-kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-4.14.252-195.481Upgrade perf-debuginfoUpgrade microvm-kernel-headersUpgrade perfUpgrade python-perfUpgrade microvm-kernel | Nov 5, 2021 | Sep 20, 2021 |
| Debian | — | Upgrade linux | Mar 10, 2022 | Sep 20, 2021 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-develUpgrade kernel-headersUpgrade perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libs-devel | Feb 28, 2022 | Sep 20, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Jan 28, 2022 | Sep 20, 2021 |
| Ubuntu | — | Upgrade linux-aws-fipsUpgrade linux-fipsUpgrade linux-hwe-5.13Upgrade linux-azure-fipsUpgrade linux-gcp-fips | Nov 19, 2024 | Sep 20, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub