BPF JIT compilers in the Linux kernel through 5.11.12 have incorrect computation of branch displacements, allowing them to execute arbitrary code within the kernel context. This affects arch/x86/net/bpf_jit_comp.c and arch/x86/net/bpf_jit_comp32.c.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade kernel-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade kernel-headersUpgrade kernel-tools-libs-develUpgrade bpftoolUpgrade kernel-debug-coreUpgrade kernel-debug-modules-extraUpgrade perfUpgrade kernel-toolsUpgrade kernel-docUpgrade kernel-develUpgrade kernel-coreUpgrade kernel-modulesUpgrade kernel-modules-extra | May 13, 2022 | Apr 8, 2021 |
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.231-173.360Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-headers | Apr 23, 2021 | Apr 8, 2021 |
| Amazon_linux | — | Upgrade kernel | May 26, 2021 | Apr 8, 2021 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Sep 1, 2021 | Apr 8, 2021 |
| Debian | — | Upgrade linux | Jun 23, 2021 | Apr 8, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-headersUpgrade kernel-develUpgrade perfUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade python-perf | Sep 16, 2021 | Apr 8, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-develUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfo | Oct 26, 2021 | Apr 8, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade kernelUpgrade kernel-tools-libsUpgrade perfUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-headers | Jul 19, 2021 | Apr 8, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade perfUpgrade kernel-develUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-sourceUpgrade kernel-toolsUpgrade bpftoolUpgrade python-perf | Jun 28, 2021 | Apr 8, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Jul 2, 2021 | Apr 8, 2021 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | May 11, 2021 | Apr 8, 2021 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Sep 1, 2021 | Apr 8, 2021 |
| Rocky_linux | — | Upgrade kernel-rt-coreUpgrade python3-perfUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-coreUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade kernel-modulesUpgrade kernel-debugUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-cross-headersUpgrade kernel-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-coreUpgrade python3-perf-debuginfoUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-rtUpgrade kernel-rt-modules-extraUpgrade bpftoolUpgrade kernel-rt-kvmUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-tools-libs-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-develUpgrade kernel-rt-debug | Mar 5, 2024 | Apr 8, 2021 |
| Suse | — | Upgrade kernel-xen-develUpgrade cluster-md-kmp-rt_debugUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade ocfs2-kmp-preemptUpgrade kernel-ppc64-develUpgrade kernel-devel-rtUpgrade kernel-pae-baseUpgrade kernel-default-manUpgrade kernel-ec2-develUpgrade kernel-ppc64Upgrade kernel-default-base-rebuildUpgrade kernel-kvmsmall-develUpgrade kernel-64kbUpgrade dlm-kmp-64kbUpgrade kernel-symsUpgrade kernel-azure-extraUpgrade kernel-obs-qaUpgrade gfs2-kmp-64kbUpgrade kernel-preemptUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kgraft-patch-4_4_180-94_144-defaultUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade kgraft-patch-4_4_180-94_124-defaultUpgrade kgraft-patch-4_4_180-94_130-defaultUpgrade kernel-default-livepatchUpgrade gfs2-kmp-rtUpgrade kernel-rtUpgrade kernel-xenUpgrade kernel-xen-baseUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-rt_debugUpgrade kernel-64kb-optionalUpgrade kernel-64kb-develUpgrade reiserfs-kmp-preemptUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-bigmemUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-extraUpgrade kernel-traceUpgrade kernel-source-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-sourceUpgrade kernel-azure-optionalUpgrade kselftests-kmp-rt_debugUpgrade kernel-azure-develUpgrade kernel-debug-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-devel-azureUpgrade kgraft-patch-4_4_180-94_121-defaultUpgrade kernel-paeUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmallUpgrade kernel-syms-azureUpgrade ocfs2-kmp-rt_debugUpgrade kernel-syms-rtUpgrade kernel-default-develUpgrade kernel-azure-baseUpgrade kernel-pae-develUpgrade kernel-ec2-baseUpgrade kernel-bigmem-develUpgrade dlm-kmp-preemptUpgrade kernel-trace-baseUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-docsUpgrade kselftests-kmp-rtUpgrade kernel-rt-extraUpgrade kgraft-patch-4_4_180-94_141-defaultUpgrade kernel-default-optionalUpgrade kernel-trace-develUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-preemptUpgrade dlm-kmp-defaultUpgrade kernel-preempt-extraUpgrade kernel-preempt-develUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-default-kgraftUpgrade kernel-debugUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-preempt-optionalUpgrade reiserfs-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-bigmem-baseUpgrade kernel-debug-develUpgrade kernel-defaultUpgrade gfs2-kmp-preemptUpgrade kselftests-kmp-preemptUpgrade kernel-default-baseUpgrade kgraft-patch-4_4_180-94_138-defaultUpgrade kernel-develUpgrade kgraft-patch-4_4_180-94_127-defaultUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-azureUpgrade kernel-ppc64-baseUpgrade kernel-ec2Upgrade ocfs2-kmp-azureUpgrade dlm-kmp-rt_debugUpgrade kernel-azureUpgrade kernel-rt_debug-develUpgrade kernel-obs-buildUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-rtUpgrade kernel-source-rtUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-rt_debugUpgrade kernel-64kb-extraUpgrade kernel-rt-develUpgrade kernel-vanilla-baseUpgrade kgraft-patch-4_4_180-94_135-defaultUpgrade kernel-preempt-livepatch-devel | Apr 16, 2021 | Apr 8, 2021 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1046-azureUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.3.0-73-genericUpgrade linux-image-5.8.0-1028-gcpUpgrade linux-image-4.15.0-1113-azureUpgrade linux-image-4.4.0-209-generic-lpaeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-gkeopUpgrade linux-image-gke-5.4Upgrade linux-image-aws-lts-18.04Upgrade linux-image-aws-hweUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.6.0-1053-oemUpgrade linux-image-4.4.0-1092-kvmUpgrade linux-image-5.4.0-72-generic-lpaeUpgrade linux-image-5.4.0-1038-kvmUpgrade linux-image-snapdragonUpgrade linux-image-raspiUpgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1045-awsUpgrade linux-image-oemUpgrade linux-image-5.8.0-1021-raspi-nolpaeUpgrade linux-image-5.4.0-1014-gkeopUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.8.0-50-generic-lpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-1091-awsUpgrade linux-image-4.4.0-209-powerpc64-embUpgrade linux-image-4.4.0-209-genericUpgrade linux-image-5.8.0-50-generic-64kUpgrade linux-image-5.8.0-1021-raspiUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-4.4.0-1151-raspi2Upgrade linux-image-5.8.0-1026-oracleUpgrade linux-image-kvmUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.4.0-209-powerpc-smpUpgrade linux-image-4.15.0-1090-kvmUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-dell300xUpgrade linux-image-4.4.0-209-powerpc64-smpUpgrade linux-image-4.4.0-209-lowlatencyUpgrade linux-image-4.4.0-1127-awsUpgrade linux-image-powerpc-smpUpgrade linux-image-5.4.0-1042-gcpUpgrade linux-image-azureUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.8.0-50-genericUpgrade linux-image-5.4.0-1034-raspiUpgrade linux-image-4.4.0-209-powerpc-e500mcUpgrade linux-image-4.15.0-1084-raspi2Upgrade linux-image-5.3.0-1042-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.3.0-1039-raspi2Upgrade linux-image-5.3.0-73-lowlatencyUpgrade linux-image-4.15.0-1098-gcpUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-gcpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatencyUpgrade linux-image-5.8.0-1024-kvmUpgrade linux-image-4.4.0-1155-snapdragonUpgrade linux-image-4.15.0-1070-oracleUpgrade linux-image-5.4.0-72-genericUpgrade linux-image-4.15.0-142-generic-lpaeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.10.0-1022-oemUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-powerpc64-embUpgrade linux-image-4.15.0-1017-dell300xUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1043-oracleUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.8.0-1029-azureUpgrade linux-image-5.4.0-1042-gkeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-4.15.0-1099-awsUpgrade linux-image-4.15.0-1101-snapdragonUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.8.0-50-lowlatencyUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-gke-5.3Upgrade linux-image-raspi2Upgrade linux-image-genericUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-oracleUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-awsUpgrade linux-image-4.15.0-142-lowlatencyUpgrade linux-image-oem-20.04bUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-gkeop-5.3Upgrade linux-image-4.15.0-142-genericUpgrade linux-image-5.4.0-72-lowlatencyUpgrade linux-image-5.8.0-1030-awsUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-gke | Apr 14, 2021 | Apr 8, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 8, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub