An information disclosure vulnerability exists in the ARM SIGPAGE functionality of Linux Kernel v5.4.66 and v5.4.54. The latest version (5.11-rc4) seems to still be vulnerable. A userland application can read the contents of the sigpage, which can leak kernel memory contents. An attacker can read a process’s memory at a specific offset to trigger this vulnerability. This was fixed in kernel releases: 4.14.222 4.19.177 5.4.99 5.10.17 5.11
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
- CVSS 3.0 Base Score: 4
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-debug-modulesUpgrade kernel-debugUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-develUpgrade kernel-docUpgrade kernel-modulesUpgrade perf | May 13, 2022 | Aug 18, 2021 |
| Centos_linux | — | Upgrade kernel | May 13, 2022 | Aug 18, 2021 |
| Debian | — | Upgrade linux | Jul 22, 2021 | Jul 22, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-devel | May 25, 2022 | Aug 18, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade perfUpgrade kernelUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python-perf | Jan 4, 2022 | Aug 18, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade kernel-headersUpgrade kernel-sourceUpgrade perfUpgrade python3-perfUpgrade kernelUpgrade python-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libs | Sep 24, 2021 | Aug 18, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-tools | Oct 12, 2021 | Aug 18, 2021 |
| Oracle_linux | — | Upgrade kernel | May 18, 2022 | Jun 25, 2021 |
| Redhat_linux | — | Upgrade kernelNo solution exists | May 13, 2022 | Aug 18, 2021 |
| Rocky_linux | — | Upgrade perfUpgrade python3-perfUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-debug-coreUpgrade kernel-debug-develUpgrade kernel-cross-headersUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-tools-libs-develUpgrade kernel-modulesUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-coreUpgrade python3-perf-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modulesUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-debug-modules-extra | May 20, 2022 | Aug 18, 2021 |
| Suse | — | Upgrade kernel-source-azureUpgrade dlm-kmp-preemptUpgrade dtb-socionextUpgrade kernel-64kbUpgrade kselftests-kmp-preemptUpgrade dlm-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-develUpgrade kernel-sourceUpgrade kernel-preemptUpgrade dtb-freescaleUpgrade kernel-livepatch-5_3_18-24_78-defaultUpgrade ocfs2-kmp-preemptUpgrade ocfs2-kmp-64kbUpgrade dtb-apmUpgrade kernel-azure-extraUpgrade dtb-alUpgrade kernel-default-extraUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-devel-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-azureUpgrade dtb-zteUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-syms-azureUpgrade dtb-amlogicUpgrade kernel-obs-qaUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmallUpgrade dtb-rockchipUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade kernel-azure-develUpgrade cluster-md-kmp-defaultUpgrade dtb-qcomUpgrade dtb-marvellUpgrade kernel-macrosUpgrade dtb-exynosUpgrade dtb-broadcomUpgrade kernel-preempt-extraUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-preempt-optionalUpgrade kernel-64kb-develUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-preemptUpgrade kernel-preempt-livepatch-develUpgrade dtb-amdUpgrade dtb-caviumUpgrade kernel-debugUpgrade kernel-debug-develUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-azureUpgrade dtb-renesasUpgrade gfs2-kmp-preemptUpgrade ocfs2-kmp-defaultUpgrade dtb-xilinxUpgrade dtb-alteraUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-preemptUpgrade dtb-sprdUpgrade dlm-kmp-64kbUpgrade dtb-nvidiaUpgrade kernel-develUpgrade kernel-livepatch-5_3_18-59_19-defaultUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade kselftests-kmp-azureUpgrade dtb-hisiliconUpgrade kselftests-kmp-64kbUpgrade dtb-armUpgrade dtb-mediatekUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-preempt-develUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-default-optionalUpgrade kernel-symsUpgrade dtb-lg | Aug 11, 2021 | Aug 10, 2021 |
| Ubuntu | — | Upgrade linux-snapdragonUpgrade linux-oem-5.10Upgrade linux-hweUpgrade linux-kvmUpgrade linux-aws-fipsUpgrade linux-aws-5.4Upgrade linux-gkeop-5.4Upgrade linux-azureUpgrade linux-oracleUpgrade linux-azure-5.4Upgrade linux-raspi2Upgrade linux-raspi-5.4Upgrade linux-riscv-5.8Upgrade linux-hwe-5.8Upgrade linux-fipsUpgrade linux-azure-fdeUpgrade linux-azure-4.15Upgrade linux-raspiUpgrade linux-hwe-5.4Upgrade linux-gcp-4.15Upgrade linux-dell300xUpgrade linux-gcp-5.4Upgrade linux-azure-fipsUpgrade linuxUpgrade linux-gkeopUpgrade linux-aws-hweUpgrade linux-gke-5.4Upgrade linux-awsUpgrade linux-gkeUpgrade linux-oracle-5.4Upgrade linux-gcp-fipsUpgrade linux-gcp | Nov 19, 2024 | Aug 18, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub