In kernel/bpf/verifier.c in the Linux kernel before 5.12.13, a branch can be mispredicted (e.g., because of type confusion) and consequently an unprivileged BPF program can read arbitrary memory locations via a side-channel attack, aka CID-9183671af6db.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernelUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-4.14.238-182.421Upgrade kernel-toolsUpgrade perfUpgrade kernel-devel | Jul 19, 2021 | Jun 23, 2021 |
| Debian | — | Upgrade linux | Nov 29, 2021 | Jun 23, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-develUpgrade bpftoolUpgrade kernel-sourceUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-toolsUpgrade perf | Sep 24, 2021 | Jun 23, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | Sep 29, 2021 | Jun 23, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 23, 2021 |
| Suse | — | Upgrade dlm-kmp-64kbUpgrade kernel-azure-baseUpgrade reiserfs-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-baseUpgrade ocfs2-kmp-preemptUpgrade kernel-devel-azureUpgrade kselftests-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-macrosUpgrade dlm-kmp-preemptUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-preemptUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-preempt-extraUpgrade gfs2-kmp-defaultUpgrade kernel-azure-develUpgrade kernel-azure-livepatch-develUpgrade kernel-64kbUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-docs-htmlUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-develUpgrade kernel-vanilla-livepatch-develUpgrade kernel-64kb-extraUpgrade kernel-source-azureUpgrade kernel-azure-optionalUpgrade kernel-source-vanillaUpgrade kernel-debug-livepatch-develUpgrade kernel-azureUpgrade kernel-default-baseUpgrade kernel-vanilla-develUpgrade reiserfs-kmp-preemptUpgrade kernel-default-manUpgrade kernel-default-develUpgrade cluster-md-kmp-preemptUpgrade kernel-obs-qaUpgrade kselftests-kmp-defaultUpgrade kernel-vanilla-baseUpgrade kernel-64kb-livepatch-develUpgrade kernel-symsUpgrade kernel-64kb-develUpgrade kernel-debug-baseUpgrade kernel-preempt-optionalUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-develUpgrade kernel-defaultUpgrade kernel-vanillaUpgrade gfs2-kmp-preemptUpgrade kernel-preemptUpgrade kernel-kvmsmall-develUpgrade kernel-debugUpgrade kernel-syms-azureUpgrade kernel-preempt-develUpgrade ocfs2-kmp-defaultUpgrade kernel-sourceUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-preempt-livepatch-develUpgrade kernel-default-extraUpgrade kernel-docsUpgrade dlm-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-zfcpdump-manUpgrade kernel-zfcpdumpUpgrade kernel-default-optionalUpgrade kernel-64kb-optional | Jul 10, 2021 | Jun 23, 2021 |
| Ubuntu | — | Upgrade linux-image-oem-osp1Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.11.0-1019-awsUpgrade linux-image-5.4.0-1053-gcpUpgrade linux-image-5.11.0-37-generic-64kUpgrade linux-image-oracleUpgrade linux-image-5.4.0-87-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gke-5.4Upgrade linux-image-5.4.0-88-lowlatencyUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-awsUpgrade linux-image-5.4.0-1059-azureUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.10.0-1050-oemUpgrade linux-image-5.4.0-1047-kvmUpgrade linux-image-gkeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1053-gkeUpgrade linux-image-5.11.0-37-genericUpgrade linux-image-5.11.0-1017-azureUpgrade linux-image-oemUpgrade linux-image-5.11.0-37-lowlatencyUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-87-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-kvmUpgrade linux-image-5.4.0-1057-awsUpgrade linux-image-5.4.0-1055-oracleUpgrade linux-image-5.4.0-88-genericUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.11.0-1019-raspiUpgrade linux-image-5.4.0-1044-raspiUpgrade linux-image-gkeopUpgrade linux-image-gkeop-5.4Upgrade linux-image-azure-lts-20.04Upgrade linux-image-azure-edgeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-5.4.0-87-generic-lpaeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1024-gkeopUpgrade linux-image-genericUpgrade linux-image-5.11.0-1020-gcpUpgrade linux-image-5.11.0-37-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-5.11.0-1017-kvmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-aws-lts-20.04Upgrade linux-image-gcpUpgrade linux-image-5.11.0-1019-raspi-nolpaeUpgrade linux-image-lowlatencyUpgrade linux-image-5.11.0-1019-oracleUpgrade linux-image-generic-64kUpgrade linux-image-5.4.0-88-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-oem-20.04b | Sep 28, 2021 | Jun 23, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 23, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub