This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.11.15. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of eBPF programs. The issue results from the lack of proper validation of user-supplied eBPF programs prior to executing them. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the kernel. Was ZDI-CAN-13661.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | May 21, 2021 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade perf-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade kernel-tools-devel | Jul 4, 2022 | May 21, 2021 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 10, 2021 | May 21, 2021 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2021 |
| Oracle_linux | — | Upgrade kernel | Nov 18, 2021 | May 21, 2021 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 10, 2021 | May 21, 2021 |
| Suse | — | Upgrade kernel-livepatch-5_3_18-57-default | Feb 4, 2022 | May 21, 2021 |
| Ubuntu | — | Upgrade linux-image-raspiUpgrade linux-image-5.8.0-1036-azureUpgrade linux-image-5.8.0-1038-awsUpgrade linux-image-5.8.0-1029-raspiUpgrade linux-image-5.11.0-1011-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-5.8.0-1030-kvmUpgrade linux-image-5.8.0-1035-gcpUpgrade linux-image-5.8.0-59-genericUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.11.0-1012-raspi-nolpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.8.0-1029-raspi-nolpaeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.11.0-22-lowlatencyUpgrade linux-image-5.8.0-1033-oracleUpgrade linux-image-awsUpgrade linux-image-kvmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.8.0-59-generic-64kUpgrade linux-image-5.11.0-22-generic-64kUpgrade linux-image-5.8.0-59-generic-lpaeUpgrade linux-image-5.11.0-1012-raspiUpgrade linux-image-oracleUpgrade linux-image-genericUpgrade linux-image-generic-64kUpgrade linux-image-5.11.0-22-genericUpgrade linux-image-gcpUpgrade linux-image-5.11.0-22-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-oem-20.04Upgrade linux-image-5.11.0-1010-oracleUpgrade linux-image-5.11.0-1011-awsUpgrade linux-image-5.10.0-1033-oemUpgrade linux-image-5.11.0-1009-azureUpgrade linux-image-gkeUpgrade linux-image-virtualUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-20.04bUpgrade linux-image-5.8.0-59-lowlatencyUpgrade linux-image-5.11.0-1009-kvmUpgrade linux-image-virtual-hwe-20.04 | Jun 23, 2021 | May 21, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 21, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub