In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because the protection mechanism neglects the possibility of uninitialized memory locations on the BPF stack.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.241-184.433Upgrade perfUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.59-52.142Upgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernelUpgrade python-perf-debuginfo | Aug 6, 2021 | Aug 2, 2021 |
| Debian | — | Upgrade linux | Nov 29, 2021 | Aug 2, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernelUpgrade python-perfUpgrade kernel-headers | Feb 24, 2022 | Aug 2, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools | Nov 12, 2021 | Aug 2, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 2, 2021 |
| Suse | — | Upgrade kernel-default-kgraftUpgrade dtb-broadcomUpgrade kernel-azure-develUpgrade dtb-nvidiaUpgrade ocfs2-kmp-64kbUpgrade dtb-socionextUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-preempt-extraUpgrade kernel-default-base-rebuildUpgrade kernel-azureUpgrade kernel-64kbUpgrade kernel-vanilla-livepatch-develUpgrade reiserfs-kmp-preemptUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-azureUpgrade dtb-caviumUpgrade reiserfs-kmp-64kbUpgrade kernel-default-develUpgrade kernel-syms-azureUpgrade kernel-azure-optionalUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-preemptUpgrade dtb-sprdUpgrade kernel-sourceUpgrade kernel-azure-extraUpgrade dtb-alteraUpgrade kernel-default-manUpgrade dtb-freescaleUpgrade kgraft-patch-4_4_180-94_150-defaultUpgrade kernel-64kb-extraUpgrade dtb-allwinnerUpgrade kernel-source-azureUpgrade kselftests-kmp-preemptUpgrade dlm-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-source-vanillaUpgrade dtb-lgUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-baseUpgrade dtb-exynosUpgrade kernel-obs-buildUpgrade kernel-preempt-develUpgrade kernel-vanilla-develUpgrade dlm-kmp-preemptUpgrade kselftests-kmp-64kbUpgrade dtb-marvellUpgrade kernel-debug-develUpgrade dtb-xilinxUpgrade ocfs2-kmp-preemptUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-develUpgrade dtb-amlogicUpgrade kernel-devel-azureUpgrade kernel-zfcpdumpUpgrade kernel-vanillaUpgrade cluster-md-kmp-defaultUpgrade kernel-preempt-optionalUpgrade kernel-kvmsmall-develUpgrade dlm-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-docsUpgrade dtb-armUpgrade kernel-macrosUpgrade kernel-debug-baseUpgrade dtb-mediatekUpgrade dtb-renesasUpgrade dtb-hisiliconUpgrade kernel-preempt-livepatch-develUpgrade kernel-zfcpdump-manUpgrade reiserfs-kmp-azureUpgrade dtb-rockchipUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-debug-livepatch-develUpgrade dtb-qcomUpgrade dtb-alUpgrade cluster-md-kmp-azureUpgrade kernel-vanilla-baseUpgrade kernel-preemptUpgrade kernel-64kb-develUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-azureUpgrade kernel-defaultUpgrade kernel-symsUpgrade cluster-md-kmp-preemptUpgrade kernel-default-extraUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-optionalUpgrade dtb-zteUpgrade kernel-obs-qaUpgrade kernel-debugUpgrade dtb-apmUpgrade dtb-amd | Sep 16, 2021 | Aug 2, 2021 |
| Ubuntu | — | Upgrade linux-image-5.4.0-90-genericUpgrade linux-image-5.4.0-1046-raspiUpgrade linux-image-5.4.0-90-generic-lpaeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-generic-64kUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.11.0-1020-gcpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1055-gkeUpgrade linux-image-bluefieldUpgrade linux-image-raspi-nolpaeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-genericUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-azure-edgeUpgrade linux-image-virtualUpgrade linux-image-raspi2Upgrade linux-image-oem-20.04bUpgrade linux-image-lowlatencyUpgrade linux-image-5.11.0-1017-kvmUpgrade linux-image-5.4.0-1021-bluefieldUpgrade linux-image-5.11.0-1019-oracleUpgrade linux-image-5.4.0-1049-kvmUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.11.0-1019-raspiUpgrade linux-image-gkeopUpgrade linux-image-5.10.0-1050-oemUpgrade linux-image-kvmUpgrade linux-image-5.11.0-1019-awsUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1007-ibmUpgrade linux-image-5.4.0-1063-azureUpgrade linux-image-5.11.0-37-lowlatencyUpgrade linux-image-oemUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1057-gcpUpgrade linux-image-5.13.0-1014-oemUpgrade linux-image-oem-20.04cUpgrade linux-image-5.11.0-37-generic-lpaeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.11.0-37-generic-64kUpgrade linux-image-awsUpgrade linux-image-gkeUpgrade linux-image-5.4.0-1059-awsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1026-gkeopUpgrade linux-image-5.11.0-1017-azureUpgrade linux-image-oem-osp1Upgrade linux-image-oracleUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1057-oracleUpgrade linux-image-5.4.0-90-lowlatencyUpgrade linux-image-gke-5.4Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.11.0-37-genericUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.11.0-1019-raspi-nolpaeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-azure | Sep 28, 2021 | Aug 2, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub