kernel/bpf/verifier.c in the Linux kernel through 5.12.1 performs undesirable speculative loads, leading to disclosure of stack content via side-channel attacks, aka CID-801c6058d14a. The specific concern is not protecting the BPF stack area against speculative loads. Also, the BPF stack can contain uninitialized data that might represent sensitive information previously operated on by the kernel.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | May 6, 2021 |
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade perfUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-livepatch-4.14.232-176.381Upgrade python-perf | May 26, 2021 | May 6, 2021 |
| Amazon_linux | — | Upgrade kernel | May 26, 2021 | May 6, 2021 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 10, 2021 | May 6, 2021 |
| Debian | — | Upgrade linux | Jun 23, 2021 | May 6, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade kernel-headersUpgrade python-perfUpgrade bpftoolUpgrade python3-perfUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-sourceUpgrade kernel-toolsUpgrade kernel-devel | Aug 10, 2021 | May 6, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools | Aug 10, 2021 | May 6, 2021 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jul 16, 2021 | Apr 30, 2021 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Nov 10, 2021 | May 6, 2021 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1092-raspi2Upgrade linux-image-5.8.0-1033-oracleUpgrade linux-image-raspiUpgrade linux-image-oracleUpgrade linux-image-5.4.0-1041-kvmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-4.15.0-151-generic-lpaeUpgrade linux-image-aws-hweUpgrade linux-image-5.11.0-1010-oracleUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.11.0-1012-raspi-nolpaeUpgrade linux-image-5.11.0-1011-gcpUpgrade linux-image-4.15.0-151-genericUpgrade linux-image-5.11.0-1012-raspiUpgrade linux-image-4.15.0-1109-snapdragonUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-77-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-5.8.0-1030-kvmUpgrade linux-image-5.4.0-77-generic-lpaeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1048-oracleUpgrade linux-image-5.11.0-1009-kvmUpgrade linux-image-5.11.0-22-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-5.8.0-1029-raspi-nolpaeUpgrade linux-image-awsUpgrade linux-image-aws-lts-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1046-gkeUpgrade linux-image-4.15.0-1109-awsUpgrade linux-image-5.8.0-1029-raspiUpgrade linux-image-5.4.0-1046-gcpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.8.0-1035-gcpUpgrade linux-image-5.8.0-59-genericUpgrade linux-image-4.15.0-151-lowlatencyUpgrade linux-image-azureUpgrade linux-image-4.15.0-1097-kvmUpgrade linux-image-5.8.0-1038-awsUpgrade linux-image-5.8.0-59-generic-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.15.0-1121-azureUpgrade linux-image-4.15.0-1106-gcpUpgrade linux-image-generic-64kUpgrade linux-image-5.10.0-1029-oemUpgrade linux-image-5.8.0-59-generic-lpaeUpgrade linux-image-4.15.0-1078-oracleUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.4.0-1051-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-77-genericUpgrade linux-image-5.8.0-1036-azureUpgrade linux-image-5.11.0-22-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-5.11.0-22-generic-64kUpgrade linux-image-snapdragonUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-5.4.0-1051-azureUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-gcpUpgrade linux-image-oem-20.04bUpgrade linux-image-5.11.0-22-genericUpgrade linux-image-5.4.0-1018-gkeopUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-gkeopUpgrade linux-image-oem-osp1Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.8.0-59-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-gkeop-5.4Upgrade linux-image-gkeUpgrade linux-image-aws-lts-18.04Upgrade linux-image-gke-5.4Upgrade linux-image-5.4.0-1038-raspiUpgrade linux-image-oemUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.11.0-1009-azureUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.11.0-1011-awsUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-oem-20.04 | Jun 4, 2021 | May 6, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | May 6, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub