The eBPF RINGBUF bpf_ringbuf_reserve() function in the Linux kernel did not check that the allocated size was smaller than the ringbuf size, allowing an attacker to perform out-of-bounds writes within the kernel and therefore, arbitrary code execution. This issue was fixed via commit 4b81ccebaeee ("bpf, ringbuf: Deny reserve of buffers larger than ringbuf") (v5.13-rc4) and backported to the stable kernels in v5.12.4, v5.11.21, and v5.10.37. It was introduced via 457f44363a88 ("bpf: Implement BPF ring buffer and verifier support for it") (v5.8-rc1).
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Jun 4, 2021 |
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64 | Jul 4, 2022 | Jun 4, 2021 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 10, 2021 | Jun 4, 2021 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 4, 2021 |
| Oracle_linux | — | Upgrade kernel | Nov 18, 2021 | May 11, 2021 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 10, 2021 | Jun 4, 2021 |
| Suse | — | Upgrade cluster-md-kmp-64kbUpgrade cluster-md-kmp-preemptUpgrade kernel-develUpgrade kernel-default-livepatch-develUpgrade kernel-obs-buildUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-preemptUpgrade reiserfs-kmp-preemptUpgrade kernel-preempt-optionalUpgrade dlm-kmp-preemptUpgrade kernel-defaultUpgrade kernel-debug-develUpgrade kernel-docs-htmlUpgrade kernel-preempt-livepatch-develUpgrade kernel-source-azureUpgrade kernel-64kb-extraUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-64kbUpgrade kernel-default-optionalUpgrade gfs2-kmp-azureUpgrade kernel-preempt-extraUpgrade kselftests-kmp-azureUpgrade kernel-preempt-develUpgrade kernel-default-baseUpgrade kernel-source-vanillaUpgrade kernel-default-livepatchUpgrade gfs2-kmp-preemptUpgrade kernel-azure-optionalUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade kernel-preemptUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade kernel-debugUpgrade kernel-symsUpgrade kernel-macrosUpgrade kernel-syms-azureUpgrade dlm-kmp-defaultUpgrade kernel-default-develUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-64kb-develUpgrade kselftests-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-docsUpgrade gfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade kernel-azure-develUpgrade kernel-devel-azureUpgrade kernel-kvmsmallUpgrade kernel-default-extraUpgrade ocfs2-kmp-preempt | Jun 16, 2021 | May 11, 2021 |
| Ubuntu | — | Upgrade linux-image-5.11.0-1007-awsUpgrade linux-image-5.8.0-1024-raspiUpgrade linux-image-5.11.0-17-generic-lpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.11.0-1008-raspi-nolpaeUpgrade linux-image-kvmUpgrade linux-image-5.11.0-17-genericUpgrade linux-image-azureUpgrade linux-image-raspiUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.11.0-1008-raspiUpgrade linux-image-5.8.0-1027-kvmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.11.0-1006-oracleUpgrade linux-image-awsUpgrade linux-image-5.11.0-1007-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-5.8.0-1031-gcpUpgrade linux-image-5.8.0-1033-awsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-5.8.0-1032-azureUpgrade linux-image-gcpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.11.0-1007-kvmUpgrade linux-image-5.8.0-53-lowlatencyUpgrade linux-image-5.11.0-17-lowlatencyUpgrade linux-image-genericUpgrade linux-image-virtualUpgrade linux-image-oem-20.04bUpgrade linux-image-5.11.0-17-generic-64kUpgrade linux-image-5.8.0-53-generic-lpaeUpgrade linux-image-oem-20.04Upgrade linux-image-5.8.0-53-genericUpgrade linux-image-5.8.0-1024-raspi-nolpaeUpgrade linux-image-5.10.0-1026-oemUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.8.0-53-generic-64kUpgrade linux-image-5.11.0-1005-azureUpgrade linux-image-oracleUpgrade linux-image-5.8.0-1029-oracle | May 12, 2021 | May 11, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 4, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub