The eBPF RINGBUF bpf_ringbuf_reserve() function in the Linux kernel did not check that the allocated size was smaller than the ringbuf size, allowing an attacker to perform out-of-bounds writes within the kernel and therefore, arbitrary code execution. This issue was fixed via commit 4b81ccebaeee ("bpf, ringbuf: Deny reserve of buffers larger than ringbuf") (v5.13-rc4) and backported to the stable kernels in v5.12.4, v5.11.21, and v5.10.37. It was introduced via 457f44363a88 ("bpf: Implement BPF ring buffer and verifier support for it") (v5.8-rc1).
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Jun 4, 2021 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade bpftoolUpgrade kernel-develUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64 | Jul 4, 2022 | Jun 4, 2021 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 10, 2021 | Jun 4, 2021 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 4, 2021 |
| Oracle_linux | — | Upgrade kernel | Nov 18, 2021 | May 11, 2021 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 10, 2021 | Jun 4, 2021 |
| Suse | — | Upgrade kernel-debug-develUpgrade dlm-kmp-preemptUpgrade kernel-defaultUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-preemptUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-preemptUpgrade kernel-default-optionalUpgrade ocfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-source-azureUpgrade kernel-default-livepatch-develUpgrade kernel-azure-optionalUpgrade dlm-kmp-64kbUpgrade kernel-preempt-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-extraUpgrade kselftests-kmp-preemptUpgrade kernel-azureUpgrade kernel-preempt-extraUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-64kbUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-preemptUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-preempt-optionalUpgrade kernel-develUpgrade kernel-default-baseUpgrade kernel-default-livepatchUpgrade kselftests-kmp-64kbUpgrade kernel-preempt-develUpgrade gfs2-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-symsUpgrade kernel-docsUpgrade kernel-obs-qaUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-preemptUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-optionalUpgrade kernel-debugUpgrade kernel-default-develUpgrade kernel-macrosUpgrade kernel-64kbUpgrade kernel-syms-azureUpgrade kernel-64kb-develUpgrade kernel-preemptUpgrade dlm-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-sourceUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-azure-devel | Jun 16, 2021 | May 11, 2021 |
| Ubuntu | — | Upgrade linux-image-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.11.0-1008-raspi-nolpaeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.11.0-1006-oracleUpgrade linux-image-5.11.0-1008-raspiUpgrade linux-image-5.11.0-1007-awsUpgrade linux-image-5.11.0-17-generic-lpaeUpgrade linux-image-5.11.0-1007-gcpUpgrade linux-image-5.8.0-1024-raspiUpgrade linux-image-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-5.8.0-1027-kvmUpgrade linux-image-5.11.0-17-genericUpgrade linux-image-gcpUpgrade linux-image-5.8.0-1024-raspi-nolpaeUpgrade linux-image-5.8.0-1033-awsUpgrade linux-image-generic-64kUpgrade linux-image-5.8.0-53-generic-64kUpgrade linux-image-5.8.0-1031-gcpUpgrade linux-image-5.11.0-1007-kvmUpgrade linux-image-5.8.0-53-genericUpgrade linux-image-5.8.0-1032-azureUpgrade linux-image-gkeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.11.0-1005-azureUpgrade linux-image-oracleUpgrade linux-image-5.10.0-1026-oemUpgrade linux-image-5.11.0-17-generic-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-5.11.0-17-lowlatencyUpgrade linux-image-5.8.0-53-lowlatencyUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-5.8.0-53-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-5.8.0-1029-oracleUpgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-hwe-20.04 | May 12, 2021 | May 11, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 4, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub