An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c performs undesirable out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory, aka CID-f232326f6966. This affects pointer types that do not define a ptr_limit.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Jun 9, 2021 | Mar 20, 2021 |
| Debian | — | Upgrade linux | Mar 31, 2021 | Mar 20, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-sourceUpgrade bpftoolUpgrade python3-perfUpgrade kernel-headersUpgrade python-perfUpgrade kernel | Jun 28, 2021 | Mar 20, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libs | Jul 2, 2021 | Mar 20, 2021 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Apr 1, 2021 | Mar 19, 2021 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jun 9, 2021 | Mar 20, 2021 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-obs-buildUpgrade cluster-md-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-default | Apr 10, 2021 | Mar 20, 2021 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1096-gcpUpgrade linux-image-5.4.0-70-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-4.15.0-1111-azureUpgrade linux-image-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1036-kvmUpgrade linux-image-5.10.0-1019-oemUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeop-5.4Upgrade linux-image-aws-lts-18.04Upgrade linux-image-gkeUpgrade linux-image-gkeop-5.3Upgrade linux-image-4.15.0-140-lowlatencyUpgrade linux-image-5.8.0-48-generic-64kUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-140-genericUpgrade linux-image-5.8.0-48-genericUpgrade linux-image-5.4.0-70-lowlatencyUpgrade linux-image-5.4.0-1043-azureUpgrade linux-image-snapdragonUpgrade linux-image-azure-lts-18.04Upgrade linux-image-gkeopUpgrade linux-image-5.6.0-1052-oemUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.15.0-1099-snapdragonUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.8.0-1026-azureUpgrade linux-image-5.4.0-1041-oracleUpgrade linux-image-oem-20.04bUpgrade linux-image-raspi-nolpaeUpgrade linux-image-azureUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.3.0-1041-gkeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-generic-64kUpgrade linux-image-oem-20.04Upgrade linux-image-genericUpgrade linux-image-5.8.0-1019-raspi-nolpaeUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-5.4.0-1041-awsUpgrade linux-image-oracleUpgrade linux-image-4.15.0-1068-oracleUpgrade linux-image-5.3.0-72-genericUpgrade linux-image-5.8.0-1026-gcpUpgrade linux-image-gke-5.4Upgrade linux-image-5.8.0-48-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-1082-raspi2Upgrade linux-image-4.15.0-1097-awsUpgrade linux-image-4.15.0-1015-dell300xUpgrade linux-image-5.4.0-1012-gkeopUpgrade linux-image-4.15.0-140-generic-lpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1040-gcpUpgrade linux-image-5.4.0-70-genericUpgrade linux-image-5.8.0-1019-raspiUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.3.0-72-lowlatencyUpgrade linux-image-4.15.0-1088-kvmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gke-5.3Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.8.0-48-generic-lpaeUpgrade linux-image-5.8.0-1027-awsUpgrade linux-image-5.8.0-1022-kvmUpgrade linux-image-gcpUpgrade linux-image-virtualUpgrade linux-image-awsUpgrade linux-image-5.4.0-1032-raspiUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-raspi2Upgrade linux-image-5.8.0-1024-oracleUpgrade linux-image-5.3.0-1038-raspi2Upgrade linux-image-dell300xUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1039-gke | Mar 24, 2021 | Mar 20, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 20, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub