It was discovered that the eBPF implementation in the Linux kernel did not properly track bounds information for 32 bit registers when performing div and mod operations. A local attacker could use this to possibly execute arbitrary code.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Nov 9, 2021 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 10, 2021 | Nov 9, 2021 |
| Debian | — | Upgrade linux | Nov 29, 2021 | Nov 29, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade perfUpgrade python3-perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-source | Sep 24, 2021 | Sep 24, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Sep 29, 2021 | Sep 24, 2021 |
| Oracle_linux | — | Upgrade kernel | Nov 18, 2021 | Jun 23, 2021 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Nov 10, 2021 | Nov 9, 2021 |
| Rocky_linux | — | — | May 5, 2022 | Nov 16, 2021 |
| Ubuntu | — | Upgrade linux-image-snapdragonUpgrade linux-image-dell300xUpgrade linux-image-aws-hweUpgrade linux-image-azureUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gcpUpgrade linux-image-4.15.0-147-genericUpgrade linux-image-4.15.0-1106-snapdragonUpgrade linux-image-azure-lts-18.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-1075-oracleUpgrade linux-image-4.15.0-1118-azureUpgrade linux-image-raspi2Upgrade linux-image-lowlatencyUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-oemUpgrade linux-image-generic-lpaeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-oracleUpgrade linux-image-virtualUpgrade linux-image-4.15.0-1103-gcpUpgrade linux-image-genericUpgrade linux-image-4.15.0-147-lowlatencyUpgrade linux-image-4.15.0-147-generic-lpaeUpgrade linux-image-4.15.0-1022-dell300xUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1089-raspi2Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-1106-aws | Jun 24, 2021 | Jun 23, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub