In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because a certain preempting store operation does not necessarily occur before a store operation that has an attacker-controlled value.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.59-52.142Upgrade perf-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-livepatch-4.14.241-184.433Upgrade bpftool | Aug 6, 2021 | Aug 2, 2021 |
| Amazon_linux | — | Upgrade kernel | Mar 19, 2024 | Aug 2, 2021 |
| Debian | — | Upgrade linux | Nov 29, 2021 | Aug 2, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-develUpgrade python-perfUpgrade kernel-tools-libsUpgrade bpftool | Feb 24, 2022 | Aug 2, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Nov 12, 2021 | Aug 2, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 2, 2021 |
| Suse | — | Upgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-devel-azureUpgrade kernel-kvmsmallUpgrade kernel-vanilla-develUpgrade kernel-vanilla-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade dtb-alUpgrade reiserfs-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade dtb-amlogicUpgrade dtb-qcomUpgrade kernel-default-manUpgrade dlm-kmp-preemptUpgrade dtb-alteraUpgrade kernel-default-base-rebuildUpgrade kernel-docsUpgrade kernel-azure-develUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-macrosUpgrade kernel-kvmsmall-baseUpgrade kselftests-kmp-azureUpgrade dtb-exynosUpgrade dtb-sprdUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade kernel-preempt-extraUpgrade kselftests-kmp-defaultUpgrade kernel-source-vanillaUpgrade kselftests-kmp-preemptUpgrade dtb-armUpgrade kernel-sourceUpgrade dtb-zteUpgrade kgraft-patch-4_4_180-94_150-defaultUpgrade dtb-rockchipUpgrade kernel-preemptUpgrade kernel-debug-baseUpgrade kernel-syms-azureUpgrade kernel-defaultUpgrade dtb-nvidiaUpgrade kernel-kvmsmall-livepatch-develUpgrade cluster-md-kmp-preemptUpgrade kernel-develUpgrade gfs2-kmp-preemptUpgrade cluster-md-kmp-azureUpgrade dtb-hisiliconUpgrade ocfs2-kmp-azureUpgrade kernel-vanilla-baseUpgrade kernel-default-livepatch-develUpgrade dtb-socionextUpgrade kernel-default-optionalUpgrade reiserfs-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-azure-extraUpgrade kernel-preempt-develUpgrade gfs2-kmp-azureUpgrade dtb-broadcomUpgrade kernel-preempt-optionalUpgrade kernel-64kbUpgrade kernel-symsUpgrade kernel-default-extraUpgrade dtb-xilinxUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-preempt-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-obs-qaUpgrade dtb-amdUpgrade kernel-64kb-optionalUpgrade kernel-default-kgraftUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-64kbUpgrade dtb-marvellUpgrade ocfs2-kmp-64kbUpgrade dtb-freescaleUpgrade dtb-renesasUpgrade kernel-azure-optionalUpgrade dtb-apmUpgrade kernel-debugUpgrade kernel-vanillaUpgrade kernel-default-livepatchUpgrade dlm-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade dtb-caviumUpgrade kernel-default-develUpgrade dtb-lgUpgrade kernel-default-baseUpgrade dtb-mediatekUpgrade reiserfs-kmp-preemptUpgrade ocfs2-kmp-preemptUpgrade kernel-zfcpdump-manUpgrade kernel-debug-develUpgrade dlm-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-64kb-devel | Sep 16, 2021 | Aug 2, 2021 |
| Ubuntu | — | Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1063-azureUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.11.0-1017-kvmUpgrade linux-image-5.11.0-1019-raspiUpgrade linux-image-5.11.0-1019-oracleUpgrade linux-image-5.4.0-1059-awsUpgrade linux-image-5.11.0-37-lowlatencyUpgrade linux-image-aws-lts-20.04Upgrade linux-image-awsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1049-kvmUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1046-raspiUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1055-gkeUpgrade linux-image-oemUpgrade linux-image-bluefieldUpgrade linux-image-5.11.0-1019-awsUpgrade linux-image-5.11.0-1019-raspi-nolpaeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gke-5.4Upgrade linux-image-5.4.0-1057-oracleUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-64kUpgrade linux-image-5.11.0-37-generic-lpaeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-virtualUpgrade linux-image-oem-20.04Upgrade linux-image-5.11.0-1017-azureUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.10.0-1050-oemUpgrade linux-image-azureUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-90-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-gkeop-5.4Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.13.0-1014-oemUpgrade linux-image-gcpUpgrade linux-image-gkeUpgrade linux-image-5.11.0-1020-gcpUpgrade linux-image-5.4.0-1026-gkeopUpgrade linux-image-azure-edgeUpgrade linux-image-ibmUpgrade linux-image-gkeopUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-5.4.0-1057-gcpUpgrade linux-image-5.4.0-90-generic-lpaeUpgrade linux-image-5.4.0-1007-ibmUpgrade linux-image-5.11.0-37-genericUpgrade linux-image-5.4.0-1021-bluefieldUpgrade linux-image-5.4.0-90-genericUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.11.0-37-generic-64kUpgrade linux-image-kvmUpgrade linux-image-genericUpgrade linux-image-snapdragon-hwe-18.04 | Sep 28, 2021 | Aug 2, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub