In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because the protection mechanism neglects the possibility of uninitialized memory locations on the BPF stack.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-develUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-4.14.241-184.433Upgrade kernel-livepatch-5.10.59-52.142Upgrade perfUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf | Aug 6, 2021 | Aug 2, 2021 |
| Debian | — | Upgrade linux | Nov 29, 2021 | Aug 2, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade kernelUpgrade python-perfUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-develUpgrade bpftoolUpgrade python3-perf | Feb 24, 2022 | Aug 2, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | Nov 12, 2021 | Aug 2, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 2, 2021 |
| Suse | — | Upgrade kernel-default-optionalUpgrade kernel-docsUpgrade kernel-debug-livepatch-develUpgrade kernel-zfcpdump-manUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-azureUpgrade dtb-alUpgrade dtb-qcomUpgrade dtb-hisiliconUpgrade dtb-amlogicUpgrade dtb-rockchipUpgrade reiserfs-kmp-azureUpgrade kernel-zfcpdumpUpgrade dtb-armUpgrade kernel-preempt-livepatch-develUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-symsUpgrade kernel-kvmsmallUpgrade kernel-vanilla-baseUpgrade ocfs2-kmp-azureUpgrade dtb-zteUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-64kb-develUpgrade cluster-md-kmp-azureUpgrade kernel-macrosUpgrade kernel-obs-qaUpgrade kernel-preempt-optionalUpgrade kernel-64kb-optionalUpgrade dtb-apmUpgrade kernel-vanillaUpgrade kernel-kvmsmall-develUpgrade dtb-xilinxUpgrade dtb-amdUpgrade ocfs2-kmp-preemptUpgrade kernel-default-livepatch-develUpgrade kernel-debug-baseUpgrade kernel-debugUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-preemptUpgrade kernel-debug-develUpgrade kernel-preemptUpgrade kernel-devel-azureUpgrade dlm-kmp-defaultUpgrade dtb-renesasUpgrade dtb-mediatekUpgrade kernel-develUpgrade kernel-azureUpgrade kernel-obs-buildUpgrade dtb-broadcomUpgrade kernel-default-kgraftUpgrade kernel-default-develUpgrade dtb-exynosUpgrade kernel-default-livepatchUpgrade kernel-azure-extraUpgrade kernel-syms-azureUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-preemptUpgrade cluster-md-kmp-64kbUpgrade kernel-preempt-develUpgrade kselftests-kmp-preemptUpgrade kernel-64kb-extraUpgrade kernel-default-baseUpgrade dlm-kmp-64kbUpgrade kernel-default-manUpgrade gfs2-kmp-azureUpgrade kgraft-patch-4_4_180-94_150-defaultUpgrade kernel-preempt-extraUpgrade dtb-sprdUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-kvmsmall-baseUpgrade dtb-alteraUpgrade gfs2-kmp-preemptUpgrade gfs2-kmp-defaultUpgrade dtb-socionextUpgrade dtb-lgUpgrade kernel-azure-livepatch-develUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-64kbUpgrade kernel-source-vanillaUpgrade dtb-marvellUpgrade kselftests-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-vanilla-livepatch-develUpgrade kernel-azure-optionalUpgrade dtb-caviumUpgrade kernel-vanilla-develUpgrade kernel-sourceUpgrade kernel-source-azureUpgrade kernel-64kbUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-preemptUpgrade dtb-nvidiaUpgrade kernel-azure-develUpgrade reiserfs-kmp-64kbUpgrade dtb-freescale | Sep 16, 2021 | Aug 2, 2021 |
| Ubuntu | — | Upgrade linux-image-azure-lts-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-90-genericUpgrade linux-image-5.4.0-1049-kvmUpgrade linux-image-virtualUpgrade linux-image-5.4.0-90-generic-lpaeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.11.0-1017-kvmUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.11.0-1020-gcpUpgrade linux-image-5.4.0-1046-raspiUpgrade linux-image-5.4.0-1055-gkeUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-1021-bluefieldUpgrade linux-image-raspi2Upgrade linux-image-ibmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.11.0-1019-oracleUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.11.0-1019-raspiUpgrade linux-image-genericUpgrade linux-image-generic-64kUpgrade linux-image-bluefieldUpgrade linux-image-aws-lts-20.04Upgrade linux-image-azure-edgeUpgrade linux-image-5.11.0-37-lowlatencyUpgrade linux-image-oem-osp1Upgrade linux-image-azureUpgrade linux-image-5.4.0-1026-gkeopUpgrade linux-image-gkeUpgrade linux-image-5.4.0-1059-awsUpgrade linux-image-5.11.0-37-generic-lpaeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-5.11.0-37-generic-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.11.0-37-genericUpgrade linux-image-raspiUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1007-ibmUpgrade linux-image-5.11.0-1019-awsUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1057-oracleUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1057-gcpUpgrade linux-image-oem-20.04Upgrade linux-image-5.10.0-1050-oemUpgrade linux-image-5.13.0-1014-oemUpgrade linux-image-5.4.0-1063-azureUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-5.4.0-90-lowlatencyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-gke-5.4Upgrade linux-image-5.11.0-1019-raspi-nolpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.11.0-1017-azureUpgrade linux-image-oem | Sep 28, 2021 | Aug 2, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub