A flaw was found in the Linux kernel in versions before 5.4.92 in the BPF protocol. This flaw allows an attacker with a local account to leak information about kernel internal addresses. The highest threat from this vulnerability is to confidentiality.
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | May 28, 2021 |
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade python-perf-debuginfoUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64 | Jun 16, 2026 | Jun 16, 2026 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 10, 2021 | May 28, 2021 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 28, 2021 |
| Oracle_linux | — | Upgrade kernel | Nov 18, 2021 | Feb 1, 2021 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Nov 10, 2021 | May 28, 2021 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1038-gcpUpgrade linux-image-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gkeopUpgrade linux-image-gcpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azure-edgeUpgrade linux-image-raspi2Upgrade linux-image-5.8.0-1027-gcpUpgrade linux-image-oem-osp1Upgrade linux-image-5.8.0-1027-azureUpgrade linux-image-raspiUpgrade linux-image-genericUpgrade linux-image-azureUpgrade linux-image-gcp-edgeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.8.0-1020-raspiUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.8.0-1020-raspi-nolpaeUpgrade linux-image-5.4.0-1030-raspiUpgrade linux-image-gkeop-5.4Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-67-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-67-genericUpgrade linux-image-5.4.0-1039-awsUpgrade linux-image-5.8.0-1028-awsUpgrade linux-image-gke-5.4Upgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.8.0-49-genericUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-awsUpgrade linux-image-5.8.0-1025-oracleUpgrade linux-image-5.4.0-1034-kvmUpgrade linux-image-5.4.0-67-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-virtualUpgrade linux-image-5.8.0-49-generic-lpaeUpgrade linux-image-aws-edgeUpgrade linux-image-oemUpgrade linux-image-oem-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-5.8.0-1023-kvmUpgrade linux-image-5.4.0-1011-gkeopUpgrade linux-image-5.8.0-49-generic-64kUpgrade linux-image-5.8.0-49-lowlatencyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1039-oracleUpgrade linux-image-5.4.0-1037-gkeUpgrade linux-image-5.4.0-1041-azure | Mar 17, 2021 | Mar 16, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub