An issue was discovered in the Linux kernel through 5.11.x. kernel/bpf/verifier.c performs undesirable out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory. Specifically, for sequences of pointer arithmetic operations, the pointer modification performed by the first operation is not correctly accounted for when restricting subsequent operations.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Apr 20, 2021 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernelUpgrade perfUpgrade kernel-develUpgrade bpftoolUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.232-176.381Upgrade bpftool-debuginfo | May 26, 2021 | Apr 20, 2021 |
| Amazon_linux | — | Upgrade kernel | May 26, 2021 | Apr 20, 2021 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 10, 2021 | Apr 20, 2021 |
| Debian | — | Upgrade linux | Jun 23, 2021 | Apr 20, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade kernel-sourceUpgrade kernel-toolsUpgrade python3-perfUpgrade perfUpgrade kernel-headersUpgrade python-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftool | Aug 10, 2021 | Apr 20, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libs | Aug 10, 2021 | Apr 20, 2021 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jul 16, 2021 | Apr 18, 2021 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Nov 10, 2021 | Apr 20, 2021 |
| Suse | — | Upgrade kernel-defaultUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-rt_debugUpgrade gfs2-kmp-azureUpgrade kernel-docsUpgrade kernel-syms-azureUpgrade kernel-preemptUpgrade kernel-azure-develUpgrade kernel-azure-livepatch-develUpgrade dlm-kmp-rt_debugUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-rt_debugUpgrade kernel-rt_debug-develUpgrade kernel-rt_debug-extraUpgrade kernel-source-rtUpgrade kselftests-kmp-defaultUpgrade kernel-rt-extraUpgrade kselftests-kmp-azureUpgrade kernel-preempt-develUpgrade gfs2-kmp-preemptUpgrade kernel-default-manUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-extraUpgrade kernel-rtUpgrade kselftests-kmp-rtUpgrade kernel-azureUpgrade dlm-kmp-preemptUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-rt_debugUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-preemptUpgrade kernel-azure-baseUpgrade kernel-obs-buildUpgrade kernel-preempt-extraUpgrade kernel-source-vanillaUpgrade gfs2-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-preempt-optionalUpgrade kernel-default-baseUpgrade kernel-default-develUpgrade ocfs2-kmp-azureUpgrade kernel-source-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-preemptUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-default-extraUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-preemptUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-preemptUpgrade kernel-default-livepatchUpgrade kernel-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-preempt-livepatch-develUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-vanilla-baseUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-rt_debugUpgrade kernel-develUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmallUpgrade dlm-kmp-azureUpgrade kernel-rt-develUpgrade kernel-docs-htmlUpgrade gfs2-kmp-64kbUpgrade kernel-devel-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-develUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-rt_debugUpgrade kernel-devel-rtUpgrade kernel-rt_debugUpgrade kernel-debugUpgrade kernel-macrosUpgrade kernel-symsUpgrade kernel-sourceUpgrade kernel-obs-qaUpgrade kernel-azure-optionalUpgrade kernel-debug-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-optional | May 13, 2021 | Apr 20, 2021 |
| Ubuntu | — | Upgrade linux-image-5.11.0-1006-azureUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.11.0-1008-gcpUpgrade linux-image-5.11.0-1008-awsUpgrade linux-image-5.11.0-18-genericUpgrade linux-image-5.8.0-59-generic-lpaeUpgrade linux-image-5.8.0-59-genericUpgrade linux-image-gcpUpgrade linux-image-5.8.0-1036-azureUpgrade linux-image-5.8.0-1030-kvmUpgrade linux-image-5.11.0-1009-raspi-nolpaeUpgrade linux-image-5.8.0-1029-raspiUpgrade linux-image-5.11.0-18-generic-lpaeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.8.0-1038-awsUpgrade linux-image-oracleUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.11.0-1007-oracleUpgrade linux-image-awsUpgrade linux-image-raspiUpgrade linux-image-5.8.0-59-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-5.10.0-1029-oemUpgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.11.0-1009-raspiUpgrade linux-image-5.8.0-1035-gcpUpgrade linux-image-5.8.0-59-generic-64kUpgrade linux-image-5.11.0-18-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-5.8.0-1029-raspi-nolpaeUpgrade linux-image-azureUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-5.8.0-1033-oracleUpgrade linux-image-generic-64kUpgrade linux-image-5.11.0-18-generic-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-generic-lpaeUpgrade linux-image-5.11.0-1008-kvm | Jun 3, 2021 | Apr 20, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 20, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub