An information disclosure vulnerability exists in the ARM SIGPAGE functionality of Linux Kernel v5.4.66 and v5.4.54. The latest version (5.11-rc4) seems to still be vulnerable. A userland application can read the contents of the sigpage, which can leak kernel memory contents. An attacker can read a process’s memory at a specific offset to trigger this vulnerability. This was fixed in kernel releases: 4.14.222 4.19.177 5.4.99 5.10.17 5.11
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
- CVSS 3.0 Base Score: 4
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-toolsUpgrade kernel-develUpgrade kernel-modulesUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade bpftoolUpgrade perfUpgrade kernel-docUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-cross-headersUpgrade kernel-abi-stablelistsUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernelUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-debug-modules | May 13, 2022 | Aug 18, 2021 |
| Centos_linux | — | Upgrade kernel | May 13, 2022 | Aug 18, 2021 |
| Debian | — | Upgrade linux | Jul 22, 2021 | Jul 22, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-develUpgrade python-perf | May 25, 2022 | Aug 18, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-develUpgrade perfUpgrade kernel | Jan 4, 2022 | Aug 18, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade python3-perfUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-source | Sep 24, 2021 | Aug 18, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libs | Oct 12, 2021 | Aug 18, 2021 |
| Oracle_linux | — | Upgrade kernel | May 18, 2022 | Jun 25, 2021 |
| Redhat_linux | — | No solution existsUpgrade kernel | May 13, 2022 | Aug 18, 2021 |
| Rocky_linux | — | Upgrade python3-perf-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-headersUpgrade kernel-debug-debuginfoUpgrade kernel-coreUpgrade kernel-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-debug-modulesUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-debugUpgrade kernelUpgrade kernel-develUpgrade bpftoolUpgrade kernel-cross-headersUpgrade kernel-tools-debuginfoUpgrade kernel-debug-develUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-debug-coreUpgrade perfUpgrade python3-perf | May 20, 2022 | Aug 18, 2021 |
| Suse | — | Upgrade kernel-64kb-develUpgrade kernel-azure-optionalUpgrade dtb-hisiliconUpgrade dtb-sprdUpgrade dtb-caviumUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-mediatekUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-64kbUpgrade kernel-preempt-livepatch-develUpgrade kernel-preempt-optionalUpgrade gfs2-kmp-preemptUpgrade kernel-develUpgrade gfs2-kmp-defaultUpgrade dtb-xilinxUpgrade cluster-md-kmp-preemptUpgrade dtb-allwinnerUpgrade dtb-lgUpgrade kernel-symsUpgrade dtb-alteraUpgrade kernel-livepatch-5_3_18-59_19-defaultUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-preemptUpgrade kernel-preempt-extraUpgrade kernel-debugUpgrade dtb-renesasUpgrade ocfs2-kmp-azureUpgrade kernel-debug-develUpgrade kernel-preempt-develUpgrade kernel-default-optionalUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-default-baseUpgrade dtb-nvidiaUpgrade kernel-source-vanillaUpgrade dtb-amdUpgrade dlm-kmp-64kbUpgrade kernel-azureUpgrade dtb-armUpgrade kernel-64kb-livepatch-develUpgrade dtb-exynosUpgrade dtb-socionextUpgrade gfs2-kmp-64kbUpgrade kernel-default-extraUpgrade kernel-source-azureUpgrade kernel-macrosUpgrade kernel-debug-livepatch-develUpgrade dtb-marvellUpgrade kernel-kvmsmall-develUpgrade kernel-default-develUpgrade kernel-sourceUpgrade ocfs2-kmp-preemptUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmallUpgrade kernel-obs-buildUpgrade kernel-obs-qaUpgrade kernel-azure-extraUpgrade kernel-azure-develUpgrade kernel-zfcpdumpUpgrade dlm-kmp-azureUpgrade dtb-apmUpgrade kernel-syms-azureUpgrade dtb-zteUpgrade kernel-docsUpgrade kernel-azure-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-livepatch-5_3_18-24_78-defaultUpgrade kernel-64kbUpgrade kernel-preemptUpgrade dtb-freescaleUpgrade dtb-alUpgrade dtb-amlogicUpgrade dtb-rockchipUpgrade kselftests-kmp-defaultUpgrade kernel-default-livepatchUpgrade kselftests-kmp-preemptUpgrade kernel-devel-azureUpgrade dtb-broadcomUpgrade dlm-kmp-preemptUpgrade kernel-docs-htmlUpgrade dtb-qcomUpgrade cluster-md-kmp-azure | Aug 11, 2021 | Aug 10, 2021 |
| Ubuntu | — | Upgrade linux-azure-4.15Upgrade linux-hweUpgrade linux-raspiUpgrade linux-fipsUpgrade linux-hwe-5.4Upgrade linux-raspi2Upgrade linux-aws-fipsUpgrade linux-azure-fdeUpgrade linux-aws-5.4Upgrade linux-oem-5.10Upgrade linux-kvmUpgrade linux-gkeop-5.4Upgrade linux-azureUpgrade linux-hwe-5.8Upgrade linux-riscv-5.8Upgrade linux-oracleUpgrade linux-raspi-5.4Upgrade linux-azure-5.4Upgrade linux-gcp-4.15Upgrade linux-snapdragonUpgrade linux-oracle-5.4Upgrade linux-azure-fipsUpgrade linux-gcp-5.4Upgrade linux-awsUpgrade linux-gcpUpgrade linuxUpgrade linux-gcp-fipsUpgrade linux-aws-hweUpgrade linux-gke-5.4Upgrade linux-gkeUpgrade linux-dell300xUpgrade linux-gkeop | Nov 19, 2024 | Aug 18, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub