An out-of-bounds access flaw was found in the Linux kernel's implementation of the eBPF code verifier in the way a user running the eBPF script calls dev_map_init_map or sock_map_alloc. This flaw allows a local user to crash the system or possibly escalate their privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 9, 2021 |
| Suse | — | Upgrade dlm-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-default-base-rebuildUpgrade kernel-sourceUpgrade kernel-default-extraUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-symsUpgrade cluster-md-kmp-azureUpgrade kernel-obs-qaUpgrade kernel-macrosUpgrade kernel-azure-develUpgrade kernel-kvmsmallUpgrade kernel-64kbUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-azureUpgrade kernel-preemptUpgrade kernel-default-develUpgrade ocfs2-kmp-preemptUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-develUpgrade kernel-syms-azureUpgrade kernel-docsUpgrade kernel-azure-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kernel-obs-buildUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-preempt-optionalUpgrade kernel-preempt-livepatch-develUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-preemptUpgrade kernel-debugUpgrade kernel-default-optionalUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-preemptUpgrade reiserfs-kmp-preemptUpgrade kernel-livepatch-5_3_18-59_5-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-default-baseUpgrade kernel-azureUpgrade kernel-64kb-develUpgrade kernel-defaultUpgrade kernel-source-azureUpgrade kselftests-kmp-preemptUpgrade kernel-preempt-develUpgrade dlm-kmp-preemptUpgrade kernel-develUpgrade kernel-64kb-extraUpgrade kselftests-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade dlm-kmp-64kbUpgrade kernel-docs-htmlUpgrade gfs2-kmp-azureUpgrade kernel-debug-develUpgrade cluster-md-kmp-64kbUpgrade kernel-preempt-extraUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kb | Jun 16, 2021 | Mar 9, 2021 |
| Ubuntu | — | Upgrade linux-image-5.8.0-49-generic-lpaeUpgrade linux-image-5.8.0-49-genericUpgrade linux-image-virtualUpgrade linux-image-oem-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-5.8.0-1028-awsUpgrade linux-image-generic-64kUpgrade linux-image-genericUpgrade linux-image-5.8.0-1023-kvmUpgrade linux-image-5.8.0-49-generic-64kUpgrade linux-image-awsUpgrade linux-image-azureUpgrade linux-image-raspiUpgrade linux-image-5.8.0-49-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.8.0-1025-oracleUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.8.0-1020-raspi-nolpaeUpgrade linux-image-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-gcpUpgrade linux-image-5.8.0-1027-azureUpgrade linux-image-5.8.0-1020-raspiUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.8.0-1027-gcp | Apr 14, 2021 | Mar 9, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 9, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub