An issue was discovered in the Linux kernel through 5.11.x. kernel/bpf/verifier.c performs undesirable out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory. Specifically, for sequences of pointer arithmetic operations, the pointer modification performed by the first operation is not correctly accounted for when restricting subsequent operations.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Apr 20, 2021 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-develUpgrade perfUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-livepatch-4.14.232-176.381Upgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfo | May 26, 2021 | Apr 20, 2021 |
| Amazon_linux | — | Upgrade kernel | May 26, 2021 | Apr 20, 2021 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 10, 2021 | Apr 20, 2021 |
| Debian | — | Upgrade linux | Jun 23, 2021 | Apr 20, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-sourceUpgrade kernel-tools-libsUpgrade kernelUpgrade python-perfUpgrade bpftoolUpgrade kernel-headers | Aug 10, 2021 | Apr 20, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | Aug 10, 2021 | Apr 20, 2021 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jul 16, 2021 | Apr 18, 2021 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Nov 10, 2021 | Apr 20, 2021 |
| Suse | — | Upgrade kernel-default-manUpgrade kernel-rtUpgrade kernel-defaultUpgrade kernel-rt-extraUpgrade kernel-rt_debug-extraUpgrade kernel-64kb-extraUpgrade kernel-rt_debug-develUpgrade kernel-preempt-extraUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-rt_debugUpgrade kernel-azure-baseUpgrade kernel-obs-buildUpgrade gfs2-kmp-preemptUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-rtUpgrade dlm-kmp-preemptUpgrade kernel-azureUpgrade kernel-docsUpgrade dlm-kmp-rt_debugUpgrade kernel-preemptUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-azure-develUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-azure-livepatch-develUpgrade kselftests-kmp-preemptUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-azureUpgrade kernel-preempt-develUpgrade kernel-source-rtUpgrade kselftests-kmp-rt_debugUpgrade cluster-md-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-source-vanillaUpgrade kernel-syms-rtUpgrade ocfs2-kmp-rt_debugUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt_debugUpgrade dlm-kmp-64kbUpgrade kernel-default-optionalUpgrade kernel-64kb-develUpgrade dlm-kmp-azureUpgrade kernel-preempt-livepatch-develUpgrade kernel-64kbUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-preempt-optionalUpgrade cluster-md-kmp-azureUpgrade kernel-default-baseUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-rt_debugUpgrade kernel-debug-develUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-rtUpgrade kernel-default-extraUpgrade kernel-default-livepatchUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-develUpgrade kernel-devel-azureUpgrade kernel-default-develUpgrade cluster-md-kmp-preemptUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-source-azureUpgrade kernel-symsUpgrade kernel-vanilla-baseUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-develUpgrade kernel-sourceUpgrade dlm-kmp-defaultUpgrade kernel-azure-extraUpgrade ocfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-preemptUpgrade kernel-rt-develUpgrade kernel-zfcpdumpUpgrade kernel-macrosUpgrade cluster-md-kmp-rt_debugUpgrade kernel-debugUpgrade kernel-devel-rtUpgrade gfs2-kmp-rtUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-preemptUpgrade ocfs2-kmp-rt | May 13, 2021 | Apr 20, 2021 |
| Ubuntu | — | Upgrade linux-image-5.8.0-1033-oracleUpgrade linux-image-5.11.0-18-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-5.8.0-1035-gcpUpgrade linux-image-5.11.0-1008-kvmUpgrade linux-image-5.11.0-18-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-5.11.0-1009-raspiUpgrade linux-image-gkeUpgrade linux-image-5.8.0-1029-raspi-nolpaeUpgrade linux-image-oem-20.04Upgrade linux-image-5.8.0-59-generic-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.10.0-1029-oemUpgrade linux-image-azureUpgrade linux-image-5.8.0-59-genericUpgrade linux-image-5.11.0-18-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-5.8.0-59-lowlatencyUpgrade linux-image-5.11.0-1008-gcpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.11.0-1007-oracleUpgrade linux-image-5.8.0-59-generic-lpaeUpgrade linux-image-5.11.0-1006-azureUpgrade linux-image-oracleUpgrade linux-image-awsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-5.11.0-1008-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.11.0-18-genericUpgrade linux-image-5.8.0-1029-raspiUpgrade linux-image-5.11.0-1009-raspi-nolpaeUpgrade linux-image-5.8.0-1036-azureUpgrade linux-image-5.8.0-1030-kvmUpgrade linux-image-raspiUpgrade linux-image-5.8.0-1038-awsUpgrade linux-image-virtual-hwe-20.04 | Jun 3, 2021 | Apr 20, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 20, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub