An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c performs undesirable out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory, aka CID-f232326f6966. This affects pointer types that do not define a ptr_limit.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Jun 9, 2021 | Mar 20, 2021 |
| Debian | — | Upgrade linux | Mar 31, 2021 | Mar 20, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade kernelUpgrade python-perfUpgrade perfUpgrade python3-perfUpgrade kernel-sourceUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-libsUpgrade bpftool | Jun 28, 2021 | Mar 20, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libs | Jul 2, 2021 | Mar 20, 2021 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Apr 1, 2021 | Mar 19, 2021 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Jun 9, 2021 | Mar 20, 2021 |
| Suse | — | Upgrade kernel-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-default-extraUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-default | Apr 10, 2021 | Mar 20, 2021 |
| Ubuntu | — | Upgrade linux-image-awsUpgrade linux-image-raspi2Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-4.15.0-140-generic-lpaeUpgrade linux-image-5.8.0-48-lowlatencyUpgrade linux-image-5.3.0-1038-raspi2Upgrade linux-image-5.4.0-1032-raspiUpgrade linux-image-4.15.0-1015-dell300xUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-4.15.0-1082-raspi2Upgrade linux-image-5.8.0-1027-awsUpgrade linux-image-5.8.0-48-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.8.0-1019-raspiUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.4.0-1040-gcpUpgrade linux-image-5.8.0-1024-oracleUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1068-oracleUpgrade linux-image-5.4.0-1012-gkeopUpgrade linux-image-5.3.0-72-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-gke-5.4Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gke-5.3Upgrade linux-image-5.3.0-72-genericUpgrade linux-image-5.8.0-1026-gcpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-5.4.0-1039-gkeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-gcpUpgrade linux-image-4.15.0-1088-kvmUpgrade linux-image-gkeop-5.3Upgrade linux-image-generic-64kUpgrade linux-image-gkeUpgrade linux-image-4.15.0-140-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1041-awsUpgrade linux-image-5.3.0-1041-gkeUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1043-azureUpgrade linux-image-aws-lts-18.04Upgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-5.8.0-48-genericUpgrade linux-image-4.15.0-140-genericUpgrade linux-image-5.10.0-1019-oemUpgrade linux-image-5.8.0-1019-raspi-nolpaeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-aws-hweUpgrade linux-image-raspi-nolpaeUpgrade linux-image-4.15.0-1099-snapdragonUpgrade linux-image-5.8.0-1026-azureUpgrade linux-image-azureUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.8.0-48-generic-64kUpgrade linux-image-4.15.0-1096-gcpUpgrade linux-image-gkeopUpgrade linux-image-oem-20.04bUpgrade linux-image-oemUpgrade linux-image-5.4.0-1036-kvmUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.6.0-1052-oemUpgrade linux-image-azure-lts-18.04Upgrade linux-image-snapdragonUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-5.4.0-1041-oracleUpgrade linux-image-5.4.0-70-generic-lpaeUpgrade linux-image-raspiUpgrade linux-image-4.15.0-1111-azureUpgrade linux-image-5.4.0-70-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeop-5.4 | Mar 24, 2021 | Mar 20, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 20, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub