In kernel/bpf/verifier.c in the Linux kernel before 5.12.13, a branch can be mispredicted (e.g., because of type confusion) and consequently an unprivileged BPF program can read arbitrary memory locations via a side-channel attack, aka CID-9183671af6db.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade kernel-livepatch-4.14.238-182.421Upgrade python-perfUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64 | Jul 19, 2021 | Jun 23, 2021 |
| Debian | — | Upgrade linux | Nov 29, 2021 | Jun 23, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade perfUpgrade python-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-source | Sep 24, 2021 | Jun 23, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | Sep 29, 2021 | Jun 23, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 23, 2021 |
| Suse | — | Upgrade kernel-vanilla-develUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-azureUpgrade kernel-64kbUpgrade kernel-devel-azureUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-baseUpgrade kernel-vanilla-livepatch-develUpgrade kernel-debug-develUpgrade ocfs2-kmp-preemptUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-develUpgrade kernel-preempt-extraUpgrade dlm-kmp-preemptUpgrade kernel-default-livepatchUpgrade kselftests-kmp-preemptUpgrade gfs2-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-baseUpgrade kernel-azure-extraUpgrade kernel-azure-optionalUpgrade kernel-source-azureUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-defaultUpgrade kernel-default-develUpgrade ocfs2-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-kvmsmallUpgrade kernel-default-baseUpgrade kernel-azureUpgrade kernel-macrosUpgrade reiserfs-kmp-preemptUpgrade kernel-64kb-extraUpgrade dlm-kmp-64kbUpgrade kernel-obs-buildUpgrade reiserfs-kmp-64kbUpgrade kernel-default-manUpgrade kernel-debug-livepatch-develUpgrade kernel-default-optionalUpgrade kernel-obs-qaUpgrade reiserfs-kmp-defaultUpgrade kernel-debugUpgrade ocfs2-kmp-defaultUpgrade kernel-sourceUpgrade kernel-syms-azureUpgrade kernel-debug-baseUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-preemptUpgrade ocfs2-kmp-azureUpgrade kernel-vanillaUpgrade kernel-vanilla-baseUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-symsUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-develUpgrade cluster-md-kmp-preemptUpgrade gfs2-kmp-64kbUpgrade kernel-defaultUpgrade kernel-preempt-livepatch-develUpgrade kernel-develUpgrade kernel-default-extraUpgrade kernel-docsUpgrade dlm-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-preempt-develUpgrade kernel-preempt-optionalUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-manUpgrade kernel-preemptUpgrade kernel-64kb-optional | Jul 10, 2021 | Jun 23, 2021 |
| Ubuntu | — | Upgrade linux-image-5.4.0-87-generic-lpaeUpgrade linux-image-5.4.0-88-generic-lpaeUpgrade linux-image-5.11.0-1019-raspi-nolpaeUpgrade linux-image-5.11.0-37-generic-lpaeUpgrade linux-image-raspiUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1055-oracleUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1044-raspiUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-azure-edgeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1024-gkeopUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.11.0-1020-gcpUpgrade linux-image-generic-64kUpgrade linux-image-5.11.0-1019-raspiUpgrade linux-image-5.4.0-88-genericUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-5.11.0-1019-oracleUpgrade linux-image-oem-20.04bUpgrade linux-image-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-gkeopUpgrade linux-image-5.11.0-1017-kvmUpgrade linux-image-raspi2Upgrade linux-image-gkeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.10.0-1050-oemUpgrade linux-image-5.4.0-1053-gcpUpgrade linux-image-5.4.0-1053-gkeUpgrade linux-image-gke-5.4Upgrade linux-image-5.4.0-1047-kvmUpgrade linux-image-5.11.0-1019-awsUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1057-awsUpgrade linux-image-oemUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.11.0-37-generic-64kUpgrade linux-image-5.11.0-1017-azureUpgrade linux-image-5.4.0-87-lowlatencyUpgrade linux-image-awsUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1059-azureUpgrade linux-image-virtualUpgrade linux-image-5.4.0-87-genericUpgrade linux-image-oracleUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-88-lowlatencyUpgrade linux-image-5.11.0-37-genericUpgrade linux-image-5.11.0-37-lowlatencyUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-raspi-nolpae | Sep 28, 2021 | Jun 23, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 23, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub