The eBPF RINGBUF bpf_ringbuf_reserve() function in the Linux kernel did not check that the allocated size was smaller than the ringbuf size, allowing an attacker to perform out-of-bounds writes within the kernel and therefore, arbitrary code execution. This issue was fixed via commit 4b81ccebaeee ("bpf, ringbuf: Deny reserve of buffers larger than ringbuf") (v5.13-rc4) and backported to the stable kernels in v5.12.4, v5.11.21, and v5.10.37. It was introduced via 457f44363a88 ("bpf: Implement BPF ring buffer and verifier support for it") (v5.8-rc1).
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Jun 4, 2021 |
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade python-perfUpgrade perfUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64 | Jul 4, 2022 | Jun 4, 2021 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 10, 2021 | Jun 4, 2021 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 4, 2021 |
| Oracle_linux | — | Upgrade kernel | Nov 18, 2021 | May 11, 2021 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 10, 2021 | Jun 4, 2021 |
| Suse | — | Upgrade kernel-preempt-optionalUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-extraUpgrade kernel-develUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-preempt-develUpgrade kernel-default-optionalUpgrade kernel-source-azureUpgrade kernel-default-baseUpgrade kernel-default-livepatchUpgrade kernel-azure-optionalUpgrade gfs2-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-source-vanillaUpgrade kernel-azureUpgrade kselftests-kmp-preemptUpgrade cluster-md-kmp-preemptUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-extraUpgrade dlm-kmp-64kbUpgrade kernel-preempt-extraUpgrade reiserfs-kmp-preemptUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-preemptUpgrade kernel-defaultUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-preempt-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade kernel-docs-htmlUpgrade kselftests-kmp-azureUpgrade kernel-debug-develUpgrade gfs2-kmp-preemptUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-default-develUpgrade kernel-obs-qaUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-macrosUpgrade kernel-syms-azureUpgrade dlm-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-preemptUpgrade kernel-docsUpgrade kernel-zfcpdumpUpgrade kernel-default-extraUpgrade gfs2-kmp-64kbUpgrade kernel-64kbUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmallUpgrade kernel-azure-develUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-preemptUpgrade dlm-kmp-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-symsUpgrade kernel-debugUpgrade reiserfs-kmp-azureUpgrade kernel-sourceUpgrade kernel-devel-azure | Jun 16, 2021 | May 11, 2021 |
| Ubuntu | — | Upgrade linux-image-virtualUpgrade linux-image-genericUpgrade linux-image-oem-20.04bUpgrade linux-image-5.11.0-17-generic-64kUpgrade linux-image-gkeUpgrade linux-image-5.8.0-53-lowlatencyUpgrade linux-image-5.8.0-1031-gcpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.8.0-53-generic-64kUpgrade linux-image-5.8.0-1029-oracleUpgrade linux-image-5.8.0-1033-awsUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.8.0-53-generic-lpaeUpgrade linux-image-5.11.0-17-lowlatencyUpgrade linux-image-5.11.0-1007-kvmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.11.0-1005-azureUpgrade linux-image-gcpUpgrade linux-image-5.10.0-1026-oemUpgrade linux-image-5.8.0-1024-raspi-nolpaeUpgrade linux-image-5.8.0-1032-azureUpgrade linux-image-oracleUpgrade linux-image-5.8.0-53-genericUpgrade linux-image-oem-20.04Upgrade linux-image-kvmUpgrade linux-image-raspiUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.11.0-1007-awsUpgrade linux-image-5.11.0-17-generic-lpaeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.11.0-1008-raspiUpgrade linux-image-5.11.0-1008-raspi-nolpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.11.0-1006-oracleUpgrade linux-image-5.11.0-17-genericUpgrade linux-image-awsUpgrade linux-image-5.8.0-1027-kvmUpgrade linux-image-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-5.8.0-1024-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-5.11.0-1007-gcp | May 12, 2021 | May 11, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 4, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub