The eBPF RINGBUF bpf_ringbuf_reserve() function in the Linux kernel did not check that the allocated size was smaller than the ringbuf size, allowing an attacker to perform out-of-bounds writes within the kernel and therefore, arbitrary code execution. This issue was fixed via commit 4b81ccebaeee ("bpf, ringbuf: Deny reserve of buffers larger than ringbuf") (v5.13-rc4) and backported to the stable kernels in v5.12.4, v5.11.21, and v5.10.37. It was introduced via 457f44363a88 ("bpf: Implement BPF ring buffer and verifier support for it") (v5.8-rc1).
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Jun 4, 2021 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade perfUpgrade bpftool-debuginfoUpgrade python-perfUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel | Jul 4, 2022 | Jun 4, 2021 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 10, 2021 | Jun 4, 2021 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 4, 2021 |
| Oracle_linux | — | Upgrade kernel | Nov 18, 2021 | May 11, 2021 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 10, 2021 | Jun 4, 2021 |
| Suse | — | Upgrade kernel-kvmsmallUpgrade kernel-docsUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-preemptUpgrade kernel-64kb-optionalUpgrade kernel-syms-azureUpgrade kernel-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade kernel-debug-livepatch-develUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-64kbUpgrade kernel-debugUpgrade kernel-devel-azureUpgrade kernel-symsUpgrade kernel-64kb-develUpgrade kernel-azure-develUpgrade kernel-sourceUpgrade kernel-default-develUpgrade kernel-obs-qaUpgrade kernel-preemptUpgrade dlm-kmp-azureUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-defaultUpgrade dlm-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-develUpgrade kernel-azure-extraUpgrade kernel-preempt-optionalUpgrade kernel-source-vanillaUpgrade kernel-default-livepatchUpgrade kselftests-kmp-preemptUpgrade kernel-default-base-rebuildUpgrade kernel-azureUpgrade kernel-preempt-develUpgrade kernel-64kb-extraUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-preemptUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-preemptUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-preempt-extraUpgrade kselftests-kmp-64kbUpgrade kernel-default-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-preempt-livepatch-develUpgrade kernel-default-baseUpgrade dlm-kmp-preemptUpgrade kernel-source-azureUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-preemptUpgrade gfs2-kmp-defaultUpgrade kernel-defaultUpgrade kernel-debug-develUpgrade kselftests-kmp-azureUpgrade kernel-default-livepatch-devel | Jun 16, 2021 | May 11, 2021 |
| Ubuntu | — | Upgrade linux-image-5.8.0-1029-oracleUpgrade linux-image-5.8.0-1033-awsUpgrade linux-image-oem-20.04bUpgrade linux-image-5.10.0-1026-oemUpgrade linux-image-oracleUpgrade linux-image-5.8.0-53-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-5.8.0-1031-gcpUpgrade linux-image-5.8.0-53-genericUpgrade linux-image-5.8.0-53-generic-lpaeUpgrade linux-image-5.8.0-53-generic-64kUpgrade linux-image-5.8.0-1024-raspi-nolpaeUpgrade linux-image-5.8.0-1032-azureUpgrade linux-image-gcpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.11.0-1005-azureUpgrade linux-image-generic-64kUpgrade linux-image-5.11.0-17-generic-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-oem-20.04Upgrade linux-image-5.11.0-1007-kvmUpgrade linux-image-5.11.0-17-lowlatencyUpgrade linux-image-genericUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-5.8.0-1027-kvmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-awsUpgrade linux-image-5.11.0-17-genericUpgrade linux-image-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-5.11.0-17-generic-lpaeUpgrade linux-image-5.11.0-1007-awsUpgrade linux-image-5.11.0-1008-raspiUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.11.0-1007-gcpUpgrade linux-image-5.8.0-1024-raspiUpgrade linux-image-5.11.0-1006-oracleUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.11.0-1008-raspi-nolpae | May 12, 2021 | May 11, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 4, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub