The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The eBPF ALU32 bounds tracking for bitwise ops (AND, OR and XOR) in the Linux kernel did not properly update 32-bit bounds, which could be turned into out of bounds reads and writes in the Linux kernel and therefore, arbitrary code execution. This issue was fixed via commit 049c4e13714e ("bpf: Fix alu32 const subreg bound tracking on bitwise operations") (v5.13-rc4) and backported to the stable kernels in v5.12.4, v5.11.21, and v5.10.37. The AND/OR issues were introduced by commit 3f50f132d840 ("bpf: Verifier, do explicit ALU32 bounds tracking") (5.7-rc1) and the XOR variant was introduced by 2921c90d4718 ("bpf:Fix a verifier failure with xor") ( 5.10-rc1).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade bpftoolUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo | Jul 4, 2022 | Jun 4, 2021 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 4, 2021 |
| Suse | — | Upgrade ocfs2-kmp-preemptUpgrade kernel-azure-extraUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-develUpgrade kernel-default-extraUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-64kbUpgrade kernel-obs-qaUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade kernel-source-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-symsUpgrade kernel-preemptUpgrade kselftests-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade reiserfs-kmp-preemptUpgrade gfs2-kmp-64kbUpgrade kernel-sourceUpgrade kernel-zfcpdumpUpgrade kernel-devel-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-develUpgrade kernel-syms-azureUpgrade kernel-macrosUpgrade kernel-default-develUpgrade kernel-default-livepatchUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-preempt-livepatch-develUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-preemptUpgrade kernel-defaultUpgrade kernel-debugUpgrade cluster-md-kmp-preemptUpgrade kernel-default-optionalUpgrade kernel-preempt-develUpgrade kernel-source-vanillaUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-azureUpgrade kernel-debug-develUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-preempt-optionalUpgrade gfs2-kmp-preemptUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-preemptUpgrade kernel-develUpgrade dlm-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-preempt-extraUpgrade gfs2-kmp-azureUpgrade kernel-default-base | Jun 16, 2021 | May 11, 2021 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.11.0-1007-gcpUpgrade linux-image-5.8.0-53-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-5.11.0-1007-kvmUpgrade linux-image-5.11.0-1007-awsUpgrade linux-image-5.8.0-1031-gcpUpgrade linux-image-5.8.0-1024-raspi-nolpaeUpgrade linux-image-awsUpgrade linux-image-5.8.0-1029-oracleUpgrade linux-image-5.11.0-1006-oracleUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.11.0-17-genericUpgrade linux-image-virtualUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.11.0-1008-raspi-nolpaeUpgrade linux-image-oracleUpgrade linux-image-gcpUpgrade linux-image-5.8.0-1032-azureUpgrade linux-image-5.11.0-17-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-oem-20.04Upgrade linux-image-5.8.0-1024-raspiUpgrade linux-image-5.11.0-17-generic-lpaeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.8.0-1027-kvmUpgrade linux-image-5.8.0-1033-awsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-5.11.0-1005-azureUpgrade linux-image-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-5.11.0-1008-raspiUpgrade linux-image-5.8.0-53-genericUpgrade linux-image-oem-20.04bUpgrade linux-image-5.10.0-1026-oemUpgrade linux-image-5.11.0-17-generic-64kUpgrade linux-image-5.8.0-53-generic-64kUpgrade linux-image-azureUpgrade linux-image-5.8.0-53-lowlatency | May 12, 2021 | May 11, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 4, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub