An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c performs undesirable out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory, aka CID-f232326f6966. This affects pointer types that do not define a ptr_limit.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Jun 9, 2021 | Mar 20, 2021 |
| Debian | — | Upgrade linux | Mar 31, 2021 | Mar 20, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade kernel-sourceUpgrade perfUpgrade python3-perfUpgrade kernel-develUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernelUpgrade python-perf | Jun 28, 2021 | Mar 20, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Jul 2, 2021 | Mar 20, 2021 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Apr 1, 2021 | Mar 19, 2021 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jun 9, 2021 | Mar 20, 2021 |
| Suse | — | Upgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-obs-buildUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade kernel-default | Apr 10, 2021 | Mar 20, 2021 |
| Ubuntu | — | Upgrade linux-image-5.10.0-1019-oemUpgrade linux-image-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-5.4.0-70-generic-lpaeUpgrade linux-image-5.4.0-1043-azureUpgrade linux-image-5.8.0-48-generic-64kUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1036-kvmUpgrade linux-image-5.8.0-48-genericUpgrade linux-image-4.15.0-1099-snapdragonUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1111-azureUpgrade linux-image-5.6.0-1052-oemUpgrade linux-image-gkeop-5.3Upgrade linux-image-azure-lts-18.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-5.3.0-1041-gkeUpgrade linux-image-aws-hweUpgrade linux-image-5.8.0-1026-azureUpgrade linux-image-5.4.0-1041-awsUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-4.15.0-140-genericUpgrade linux-image-4.15.0-140-lowlatencyUpgrade linux-image-4.15.0-1096-gcpUpgrade linux-image-gkeop-5.4Upgrade linux-image-gkeUpgrade linux-image-5.4.0-1041-oracleUpgrade linux-image-5.8.0-1019-raspi-nolpaeUpgrade linux-image-5.4.0-70-lowlatencyUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oem-20.04bUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-oemUpgrade linux-image-genericUpgrade linux-image-5.8.0-48-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1012-gkeopUpgrade linux-image-dell300xUpgrade linux-image-4.15.0-1068-oracleUpgrade linux-image-5.3.0-72-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.8.0-1026-gcpUpgrade linux-image-5.4.0-70-genericUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-virtualUpgrade linux-image-4.15.0-1097-awsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1039-gkeUpgrade linux-image-kvmUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-gke-5.4Upgrade linux-image-4.15.0-1088-kvmUpgrade linux-image-gke-5.3Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.3.0-1038-raspi2Upgrade linux-image-awsUpgrade linux-image-oracleUpgrade linux-image-5.8.0-1024-oracleUpgrade linux-image-4.15.0-1082-raspi2Upgrade linux-image-4.15.0-1015-dell300xUpgrade linux-image-5.8.0-48-generic-lpaeUpgrade linux-image-5.8.0-1027-awsUpgrade linux-image-5.4.0-1040-gcpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-5.8.0-1022-kvmUpgrade linux-image-5.3.0-72-genericUpgrade linux-image-4.15.0-140-generic-lpaeUpgrade linux-image-5.4.0-1032-raspiUpgrade linux-image-5.8.0-1019-raspi | Mar 24, 2021 | Mar 20, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 20, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub