The eBPF ALU32 bounds tracking for bitwise ops (AND, OR and XOR) in the Linux kernel did not properly update 32-bit bounds, which could be turned into out of bounds reads and writes in the Linux kernel and therefore, arbitrary code execution. This issue was fixed via commit 049c4e13714e ("bpf: Fix alu32 const subreg bound tracking on bitwise operations") (v5.13-rc4) and backported to the stable kernels in v5.12.4, v5.11.21, and v5.10.37. The AND/OR issues were introduced by commit 3f50f132d840 ("bpf: Verifier, do explicit ALU32 bounds tracking") (5.7-rc1) and the XOR variant was introduced by 2921c90d4718 ("bpf:Fix a verifier failure with xor") ( 5.10-rc1).
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade python-perfUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade bpftoolUpgrade kernelUpgrade kernel-headersUpgrade perf-debuginfoUpgrade perfUpgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools | Jul 4, 2022 | Jun 4, 2021 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 4, 2021 |
| Suse | — | Upgrade kernel-docs-htmlUpgrade kernel-64kb-optionalUpgrade kernel-devel-azureUpgrade kernel-default-base-rebuildUpgrade kernel-debug-livepatch-develUpgrade kernel-sourceUpgrade kernel-obs-qaUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-preemptUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade dlm-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-macrosUpgrade kernel-64kbUpgrade kernel-64kb-develUpgrade gfs2-kmp-64kbUpgrade kernel-preemptUpgrade kernel-default-extraUpgrade reiserfs-kmp-preemptUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-default-develUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-symsUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-develUpgrade kernel-kvmsmallUpgrade kernel-azureUpgrade kernel-preempt-optionalUpgrade dlm-kmp-preemptUpgrade kernel-docsUpgrade kernel-debugUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-obs-buildUpgrade gfs2-kmp-preemptUpgrade kernel-preempt-extraUpgrade kernel-default-optionalUpgrade kernel-preempt-develUpgrade cluster-md-kmp-preemptUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-develUpgrade kernel-preempt-livepatch-develUpgrade kselftests-kmp-preemptUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-debug-develUpgrade kernel-default | Jun 16, 2021 | May 11, 2021 |
| Ubuntu | — | Upgrade linux-image-5.11.0-1008-raspiUpgrade linux-image-genericUpgrade linux-image-5.8.0-53-lowlatencyUpgrade linux-image-5.10.0-1026-oemUpgrade linux-image-5.8.0-1024-raspiUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-raspiUpgrade linux-image-5.11.0-17-generic-lpaeUpgrade linux-image-5.8.0-1027-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-5.8.0-53-genericUpgrade linux-image-5.11.0-17-generic-64kUpgrade linux-image-oem-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-20.04bUpgrade linux-image-generic-64kUpgrade linux-image-5.8.0-1033-awsUpgrade linux-image-lowlatencyUpgrade linux-image-5.8.0-53-generic-64kUpgrade linux-image-azureUpgrade linux-image-5.11.0-1005-azureUpgrade linux-image-5.11.0-17-lowlatencyUpgrade linux-image-5.8.0-53-generic-lpaeUpgrade linux-image-5.8.0-1024-raspi-nolpaeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-5.11.0-17-genericUpgrade linux-image-virtualUpgrade linux-image-5.11.0-1007-awsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.11.0-1007-kvmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.11.0-1008-raspi-nolpaeUpgrade linux-image-5.11.0-1007-gcpUpgrade linux-image-kvmUpgrade linux-image-gcpUpgrade linux-image-5.8.0-1032-azureUpgrade linux-image-5.11.0-1006-oracleUpgrade linux-image-5.8.0-1029-oracleUpgrade linux-image-5.8.0-1031-gcp | May 12, 2021 | May 11, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 4, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub