It was discovered that the eBPF implementation in the Linux kernel did not properly track bounds information for 32 bit registers when performing div and mod operations. A local attacker could use this to possibly execute arbitrary code.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Nov 9, 2021 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 10, 2021 | Nov 9, 2021 |
| Debian | — | Upgrade linux | Nov 29, 2021 | Nov 29, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade python-perfUpgrade kernelUpgrade kernel-headersUpgrade bpftoolUpgrade python3-perfUpgrade perfUpgrade kernel-sourceUpgrade kernel-toolsUpgrade kernel-devel | Sep 24, 2021 | Sep 24, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perf | Sep 29, 2021 | Sep 24, 2021 |
| Oracle_linux | — | Upgrade kernel | Nov 18, 2021 | Jun 23, 2021 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Nov 10, 2021 | Nov 9, 2021 |
| Rocky_linux | — | — | May 5, 2022 | Nov 16, 2021 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-azureUpgrade linux-image-snapdragonUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-1075-oracleUpgrade linux-image-4.15.0-1106-snapdragonUpgrade linux-image-4.15.0-1118-azureUpgrade linux-image-4.15.0-147-genericUpgrade linux-image-azure-lts-18.04Upgrade linux-image-aws-hweUpgrade linux-image-gcpUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-dell300xUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-4.15.0-1106-awsUpgrade linux-image-4.15.0-147-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1103-gcpUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1089-raspi2Upgrade linux-image-4.15.0-147-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-genericUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1022-dell300x | Jun 24, 2021 | Jun 23, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub