In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because a certain preempting store operation does not necessarily occur before a store operation that has an attacker-controlled value.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-livepatch-4.14.241-184.433Upgrade kernel-develUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-headersUpgrade perfUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.59-52.142Upgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64 | Aug 6, 2021 | Aug 2, 2021 |
| Amazon_linux | — | Upgrade kernel | Mar 19, 2024 | Aug 2, 2021 |
| Debian | — | Upgrade linux | Nov 29, 2021 | Aug 2, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade python-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade perfUpgrade kernel-headersUpgrade kernel-tools | Feb 24, 2022 | Aug 2, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Nov 12, 2021 | Aug 2, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 2, 2021 |
| Suse | — | Upgrade dtb-marvellUpgrade kernel-azure-extraUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-azureUpgrade dtb-caviumUpgrade kernel-vanillaUpgrade reiserfs-kmp-preemptUpgrade kernel-default-baseUpgrade dlm-kmp-azureUpgrade gfs2-kmp-preemptUpgrade dtb-mediatekUpgrade dtb-lgUpgrade ocfs2-kmp-preemptUpgrade kernel-default-develUpgrade dtb-xilinxUpgrade kernel-azure-optionalUpgrade kernel-default-optionalUpgrade kernel-docs-htmlUpgrade kernel-obs-qaUpgrade kernel-64kb-develUpgrade kernel-develUpgrade dlm-kmp-defaultUpgrade dtb-renesasUpgrade dtb-broadcomUpgrade kernel-debugUpgrade kernel-kvmsmall-develUpgrade dtb-hisiliconUpgrade dtb-socionextUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-amdUpgrade kernel-default-kgraftUpgrade kernel-preempt-develUpgrade ocfs2-kmp-64kbUpgrade kernel-preempt-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-preempt-optionalUpgrade gfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade dlm-kmp-64kbUpgrade kernel-debug-develUpgrade kernel-source-azureUpgrade kernel-64kbUpgrade kernel-symsUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-vanilla-baseUpgrade dtb-apmUpgrade dtb-allwinnerUpgrade ocfs2-kmp-azureUpgrade kernel-default-extraUpgrade kernel-zfcpdump-manUpgrade dtb-freescaleUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-preemptUpgrade cluster-md-kmp-defaultUpgrade kernel-docsUpgrade kernel-source-vanillaUpgrade dtb-nvidiaUpgrade kernel-64kb-extraUpgrade dtb-rockchipUpgrade kselftests-kmp-64kbUpgrade kernel-devel-azureUpgrade kernel-azure-develUpgrade cluster-md-kmp-64kbUpgrade kernel-obs-buildUpgrade reiserfs-kmp-azureUpgrade kgraft-patch-4_4_180-94_150-defaultUpgrade dtb-alUpgrade kselftests-kmp-azureUpgrade dtb-exynosUpgrade dtb-amlogicUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-preemptUpgrade kernel-azureUpgrade kernel-preempt-extraUpgrade kselftests-kmp-defaultUpgrade dtb-alteraUpgrade gfs2-kmp-defaultUpgrade dtb-sprdUpgrade kernel-debug-baseUpgrade dtb-qcomUpgrade kernel-preemptUpgrade kernel-vanilla-develUpgrade kernel-vanilla-livepatch-develUpgrade kernel-kvmsmall-baseUpgrade kernel-default-manUpgrade kernel-debug-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-azure-livepatch-develUpgrade kernel-macrosUpgrade dtb-zteUpgrade kernel-sourceUpgrade kernel-defaultUpgrade dlm-kmp-preemptUpgrade dtb-armUpgrade kernel-syms-azure | Sep 16, 2021 | Aug 2, 2021 |
| Ubuntu | — | Upgrade linux-image-5.11.0-1017-azureUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1057-gcpUpgrade linux-image-kvmUpgrade linux-image-5.4.0-90-generic-lpaeUpgrade linux-image-5.11.0-37-generic-lpaeUpgrade linux-image-5.10.0-1050-oemUpgrade linux-image-lowlatencyUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-20.04Upgrade linux-image-gcpUpgrade linux-image-5.4.0-1026-gkeopUpgrade linux-image-azureUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-1007-ibmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oem-20.04bUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-gkeUpgrade linux-image-azure-edgeUpgrade linux-image-5.11.0-1020-gcpUpgrade linux-image-raspi2Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-90-lowlatencyUpgrade linux-image-5.11.0-37-genericUpgrade linux-image-5.13.0-1014-oemUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.11.0-37-generic-64kUpgrade linux-image-ibmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-raspiUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-5.4.0-1021-bluefieldUpgrade linux-image-5.4.0-90-genericUpgrade linux-image-5.11.0-1019-awsUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1046-raspiUpgrade linux-image-5.11.0-1019-raspi-nolpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-5.11.0-1019-oracleUpgrade linux-image-5.11.0-37-lowlatencyUpgrade linux-image-awsUpgrade linux-image-5.4.0-1057-oracleUpgrade linux-image-5.11.0-1017-kvmUpgrade linux-image-5.4.0-1063-azureUpgrade linux-image-gke-5.4Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1059-awsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1055-gkeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1049-kvmUpgrade linux-image-bluefieldUpgrade linux-image-5.11.0-1019-raspi | Sep 28, 2021 | Aug 2, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub