An information disclosure vulnerability exists in the ARM SIGPAGE functionality of Linux Kernel v5.4.66 and v5.4.54. The latest version (5.11-rc4) seems to still be vulnerable. A userland application can read the contents of the sigpage, which can leak kernel memory contents. An attacker can read a process’s memory at a specific offset to trigger this vulnerability. This was fixed in kernel releases: 4.14.222 4.19.177 5.4.99 5.10.17 5.11
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
- CVSS 3.0 Base Score: 4
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-docUpgrade kernel-debug-modules-extraUpgrade perfUpgrade kernel-tools-libs-develUpgrade kernel-modulesUpgrade kernel-develUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-cross-headersUpgrade kernel-tools-libsUpgrade kernel-coreUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-debugUpgrade kernelUpgrade kernel-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-debug-core | May 13, 2022 | Aug 18, 2021 |
| Centos_linux | — | Upgrade kernel | May 13, 2022 | Aug 18, 2021 |
| Debian | — | Upgrade linux | Jul 22, 2021 | Jul 22, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-perfUpgrade kernel-develUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64 | May 25, 2022 | Aug 18, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade kernel-headersUpgrade kernel | Jan 4, 2022 | Aug 18, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-sourceUpgrade kernel-develUpgrade kernel-headersUpgrade python3-perfUpgrade perf | Sep 24, 2021 | Aug 18, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Oct 12, 2021 | Aug 18, 2021 |
| Oracle_linux | — | Upgrade kernel | May 18, 2022 | Jun 25, 2021 |
| Redhat_linux | — | Upgrade kernelNo solution exists | May 13, 2022 | Aug 18, 2021 |
| Rocky_linux | — | Upgrade kernel-debug-coreUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel-debug-develUpgrade kernel-tools-debuginfoUpgrade kernel-debugUpgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-cross-headersUpgrade kernel-toolsUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-coreUpgrade kernel-modulesUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-debug-debuginfo | May 20, 2022 | Aug 18, 2021 |
| Suse | — | Upgrade dtb-marvellUpgrade kernel-macrosUpgrade dtb-socionextUpgrade cluster-md-kmp-defaultUpgrade kernel-source-azureUpgrade dtb-qcomUpgrade dtb-freescaleUpgrade dtb-amlogicUpgrade kernel-azure-extraUpgrade kernel-preemptUpgrade reiserfs-kmp-64kbUpgrade dtb-rockchipUpgrade kernel-syms-azureUpgrade kselftests-kmp-defaultUpgrade dtb-alUpgrade kernel-kvmsmallUpgrade kselftests-kmp-preemptUpgrade dtb-apmUpgrade kernel-obs-qaUpgrade dtb-broadcomUpgrade kernel-docs-htmlUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-azureUpgrade kernel-docsUpgrade kernel-azure-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade kernel-obs-buildUpgrade ocfs2-kmp-preemptUpgrade kernel-sourceUpgrade kernel-devel-azureUpgrade dlm-kmp-defaultUpgrade kernel-livepatch-5_3_18-24_78-defaultUpgrade kernel-64kbUpgrade kernel-default-develUpgrade kernel-default-livepatchUpgrade kernel-azure-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-preemptUpgrade kernel-default-extraUpgrade dtb-exynosUpgrade dtb-zteUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-develUpgrade dtb-nvidiaUpgrade kernel-azureUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-azureUpgrade dtb-armUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-64kbUpgrade kernel-64kb-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-preempt-livepatch-develUpgrade kernel-source-vanillaUpgrade dtb-amdUpgrade cluster-md-kmp-64kbUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-livepatch-5_3_18-59_19-defaultUpgrade kernel-preempt-extraUpgrade dtb-renesasUpgrade dtb-alteraUpgrade reiserfs-kmp-preemptUpgrade kernel-preempt-develUpgrade kernel-default-optionalUpgrade dtb-sprdUpgrade ocfs2-kmp-azureUpgrade dtb-mediatekUpgrade kernel-64kb-develUpgrade kernel-default-livepatch-develUpgrade kernel-preempt-optionalUpgrade gfs2-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-symsUpgrade gfs2-kmp-preemptUpgrade kernel-develUpgrade dtb-xilinxUpgrade cluster-md-kmp-preemptUpgrade dtb-lgUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-azure-optionalUpgrade kselftests-kmp-64kbUpgrade dtb-caviumUpgrade kernel-default-baseUpgrade kernel-default | Aug 11, 2021 | Aug 10, 2021 |
| Ubuntu | — | Upgrade linux-gcp-5.4Upgrade linux-dell300xUpgrade linux-gcp-fipsUpgrade linux-oracle-5.4Upgrade linux-gkeopUpgrade linux-aws-hweUpgrade linuxUpgrade linux-gcpUpgrade linux-azure-fipsUpgrade linux-gke-5.4Upgrade linux-gkeUpgrade linux-awsUpgrade linux-snapdragonUpgrade linux-gcp-4.15Upgrade linux-oracleUpgrade linux-azure-5.4Upgrade linux-aws-fipsUpgrade linux-raspiUpgrade linux-hwe-5.8Upgrade linux-hwe-5.4Upgrade linux-hweUpgrade linux-riscv-5.8Upgrade linux-azure-fdeUpgrade linux-oem-5.10Upgrade linux-aws-5.4Upgrade linux-raspi2Upgrade linux-fipsUpgrade linux-kvmUpgrade linux-azure-4.15Upgrade linux-azureUpgrade linux-gkeop-5.4Upgrade linux-raspi-5.4 | Nov 19, 2024 | Aug 18, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub