The do_check function in kernel/bpf/verifier.c in the Linux kernel before 4.11.1 does not make the allow_ptr_leaks value available for restricting the output of the print_bpf_insn function, which allows local users to obtain sensitive address information via crafted bpf system calls.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2017 |
| Suse | — | Upgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-defaultUpgrade cluster-network-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-docs | Jun 8, 2017 | May 22, 2017 |
| Ubuntu | — | Upgrade linux-image-4.4.0-87-powerpc64-embUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-1065-raspi2Upgrade linux-image-raspi2Upgrade linux-image-awsUpgrade linux-image-4.10.0-27-generic-lpaeUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-87-powerpc64-smpUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.8.0-59-powerpc-smpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.8.0-59-powerpc64-embUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-1022-gkeUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-87-genericUpgrade linux-image-powerpc64-embUpgrade linux-image-4.10.0-27-lowlatencyUpgrade linux-image-4.10.0-27-genericUpgrade linux-image-4.4.0-1067-snapdragonUpgrade linux-image-4.4.0-1026-awsUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.10.0-26-lowlatencyUpgrade linux-image-4.4.0-87-powerpc-smpUpgrade linux-image-4.8.0-59-genericUpgrade linux-image-4.8.0-59-generic-lpaeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-87-powerpc-e500mcUpgrade linux-image-4.10.0-1010-raspi2Upgrade linux-image-4.8.0-59-powerpc-e500mcUpgrade linux-image-lowlatencyUpgrade linux-image-4.10.0-26-generic-lpaeUpgrade linux-image-4.8.0-59-lowlatencyUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lpaeUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-87-generic-lpaeUpgrade linux-image-4.8.0-1043-raspi2Upgrade linux-image-4.4.0-87-lowlatencyUpgrade linux-image-4.10.0-26-genericUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-snapdragonUpgrade linux-image-generic | Jun 20, 2017 | May 22, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 22, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub