kernel/bpf/verifier.c in the Linux kernel through 5.12.1 performs undesirable speculative loads, leading to disclosure of stack content via side-channel attacks, aka CID-801c6058d14a. The specific concern is not protecting the BPF stack area against speculative loads. Also, the BPF stack can contain uninitialized data that might represent sensitive information previously operated on by the kernel.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | May 6, 2021 |
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernelUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-4.14.232-176.381Upgrade bpftool-debuginfoUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-tools | May 26, 2021 | May 6, 2021 |
| Amazon_linux | — | Upgrade kernel | May 26, 2021 | May 6, 2021 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 10, 2021 | May 6, 2021 |
| Debian | — | Upgrade linux | Jun 23, 2021 | May 6, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade perfUpgrade python3-perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-sourceUpgrade bpftoolUpgrade kernel-headersUpgrade kernelUpgrade python-perf | Aug 10, 2021 | May 6, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perf | Aug 10, 2021 | May 6, 2021 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jul 16, 2021 | Apr 30, 2021 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Nov 10, 2021 | May 6, 2021 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1109-awsUpgrade linux-image-awsUpgrade linux-image-5.11.0-1012-raspiUpgrade linux-image-5.8.0-1029-raspi-nolpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-77-generic-lpaeUpgrade linux-image-5.8.0-1038-awsUpgrade linux-image-5.8.0-59-generic-64kUpgrade linux-image-5.4.0-1046-gcpUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1041-kvmUpgrade linux-image-5.4.0-1048-oracleUpgrade linux-image-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.11.0-22-lowlatencyUpgrade linux-image-aws-hweUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-azureUpgrade linux-image-5.8.0-1029-raspiUpgrade linux-image-5.4.0-1046-gkeUpgrade linux-image-4.15.0-151-lowlatencyUpgrade linux-image-4.15.0-151-genericUpgrade linux-image-4.15.0-1097-kvmUpgrade linux-image-4.15.0-151-generic-lpaeUpgrade linux-image-5.8.0-1030-kvmUpgrade linux-image-4.15.0-1092-raspi2Upgrade linux-image-5.11.0-1012-raspi-nolpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-77-lowlatencyUpgrade linux-image-5.8.0-1035-gcpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.11.0-1010-oracleUpgrade linux-image-5.11.0-1011-gcpUpgrade linux-image-5.8.0-1033-oracleUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1109-snapdragonUpgrade linux-image-5.8.0-59-genericUpgrade linux-image-5.11.0-1009-kvmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-5.11.0-1011-awsUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oemUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1038-raspiUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-1078-oracleUpgrade linux-image-5.4.0-1018-gkeopUpgrade linux-image-5.11.0-22-generic-64kUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-oem-20.04bUpgrade linux-image-gkeopUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gke-5.4Upgrade linux-image-raspi2Upgrade linux-image-oem-osp1Upgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1051-azureUpgrade linux-image-gkeUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.8.0-59-generic-lpaeUpgrade linux-image-5.11.0-1009-azureUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.10.0-1029-oemUpgrade linux-image-5.11.0-22-generic-lpaeUpgrade linux-image-5.4.0-77-genericUpgrade linux-image-oem-20.04Upgrade linux-image-5.11.0-22-genericUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1051-awsUpgrade linux-image-gcpUpgrade linux-image-genericUpgrade linux-image-5.8.0-59-lowlatencyUpgrade linux-image-4.15.0-1106-gcpUpgrade linux-image-5.8.0-1036-azureUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1121-azureUpgrade linux-image-virtualUpgrade linux-image-snapdragonUpgrade linux-image-lowlatency | Jun 4, 2021 | May 6, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | May 6, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub