In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because the protection mechanism neglects the possibility of uninitialized memory locations on the BPF stack.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-livepatch-5.10.59-52.142Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-4.14.241-184.433Upgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-devel | Aug 6, 2021 | Aug 2, 2021 |
| Debian | — | Upgrade linux | Nov 29, 2021 | Aug 2, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade kernel-headersUpgrade python-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-develUpgrade python3-perfUpgrade kernel-tools | Feb 24, 2022 | Aug 2, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Nov 12, 2021 | Aug 2, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 2, 2021 |
| Suse | — | Upgrade kernel-default-optionalUpgrade kernel-docsUpgrade dtb-armUpgrade dtb-amlogicUpgrade ocfs2-kmp-azureUpgrade dtb-amdUpgrade ocfs2-kmp-preemptUpgrade kernel-debug-baseUpgrade dtb-apmUpgrade kernel-default-livepatch-develUpgrade kernel-preempt-optionalUpgrade kernel-kvmsmall-develUpgrade kernel-vanillaUpgrade reiserfs-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kselftests-kmp-defaultUpgrade kernel-symsUpgrade dtb-mediatekUpgrade dtb-renesasUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-64kbUpgrade kernel-devel-azureUpgrade kernel-develUpgrade dlm-kmp-defaultUpgrade kernel-kvmsmallUpgrade dtb-zteUpgrade cluster-md-kmp-azureUpgrade kernel-default-extraUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-preemptUpgrade cluster-md-kmp-preemptUpgrade kernel-zfcpdump-manUpgrade kernel-defaultUpgrade kernel-vanilla-baseUpgrade kernel-64kb-develUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-azureUpgrade dtb-alUpgrade dtb-qcomUpgrade dtb-hisiliconUpgrade dtb-rockchipUpgrade kernel-debug-livepatch-develUpgrade kernel-preempt-livepatch-develUpgrade kernel-macrosUpgrade kernel-64kb-optionalUpgrade dtb-xilinxUpgrade kernel-vanilla-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-docs-htmlUpgrade dtb-lgUpgrade kernel-azure-livepatch-develUpgrade dlm-kmp-preemptUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-defaultUpgrade kernel-default-kgraftUpgrade dtb-nvidiaUpgrade gfs2-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-baseUpgrade kernel-preempt-develUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-preemptUpgrade kernel-obs-buildUpgrade kernel-default-develUpgrade kernel-syms-azureUpgrade kernel-default-livepatchUpgrade dtb-exynosUpgrade kernel-64kbUpgrade kernel-sourceUpgrade dtb-sprdUpgrade kernel-default-baseUpgrade reiserfs-kmp-64kbUpgrade kernel-default-manUpgrade kernel-azure-develUpgrade kernel-preempt-extraUpgrade kernel-azureUpgrade dlm-kmp-64kbUpgrade kernel-source-azureUpgrade dtb-broadcomUpgrade kernel-azure-optionalUpgrade kernel-vanilla-develUpgrade dtb-caviumUpgrade dtb-socionextUpgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-64kbUpgrade dtb-marvellUpgrade dtb-allwinnerUpgrade dtb-alteraUpgrade kselftests-kmp-preemptUpgrade kernel-64kb-extraUpgrade kgraft-patch-4_4_180-94_150-defaultUpgrade gfs2-kmp-preemptUpgrade dtb-freescaleUpgrade ocfs2-kmp-64kb | Sep 16, 2021 | Aug 2, 2021 |
| Ubuntu | — | Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-90-lowlatencyUpgrade linux-image-5.4.0-1057-oracleUpgrade linux-image-5.4.0-1059-awsUpgrade linux-image-5.11.0-37-genericUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.11.0-37-generic-lpaeUpgrade linux-image-5.11.0-37-generic-64kUpgrade linux-image-gkeUpgrade linux-image-5.11.0-1019-awsUpgrade linux-image-awsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oemUpgrade linux-image-raspiUpgrade linux-image-gke-5.4Upgrade linux-image-5.4.0-1026-gkeopUpgrade linux-image-5.11.0-1019-raspi-nolpaeUpgrade linux-image-oracleUpgrade linux-image-kvmUpgrade linux-image-oem-osp1Upgrade linux-image-5.11.0-37-lowlatencyUpgrade linux-image-5.4.0-1007-ibmUpgrade linux-image-5.4.0-1063-azureUpgrade linux-image-5.13.0-1014-oemUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1057-gcpUpgrade linux-image-5.10.0-1050-oemUpgrade linux-image-oem-20.04Upgrade linux-image-5.11.0-1017-azureUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.11.0-1017-kvmUpgrade linux-image-5.11.0-1020-gcpUpgrade linux-image-ibmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-90-genericUpgrade linux-image-5.4.0-90-generic-lpaeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-azure-edgeUpgrade linux-image-generic-64kUpgrade linux-image-bluefieldUpgrade linux-image-aws-lts-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-raspi2Upgrade linux-image-genericUpgrade linux-image-5.11.0-1019-raspiUpgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1046-raspiUpgrade linux-image-5.11.0-1019-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1055-gkeUpgrade linux-image-gkeopUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1021-bluefieldUpgrade linux-image-5.4.0-1049-kvmUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp | Sep 28, 2021 | Aug 2, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub