It was discovered that the eBPF implementation in the Linux kernel did not properly track bounds information for 32 bit registers when performing div and mod operations. A local attacker could use this to possibly execute arbitrary code.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-kernel-tools-libs-devel | May 4, 2022 | Nov 9, 2021 | |
| Centos_linux | — | centos-upgrade-kernelcentos-upgrade-kernel-rt | Nov 10, 2021 | Nov 9, 2021 |
| Debian | debian-upgrade-linux | Nov 29, 2021 | Nov 29, 2021 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-bpftoolhuawei-euleros-2_0_sp8-upgrade-kernelhuawei-euleros-2_0_sp8-upgrade-kernel-develhuawei-euleros-2_0_sp8-upgrade-kernel-headershuawei-euleros-2_0_sp8-upgrade-kernel-sourcehuawei-euleros-2_0_sp8-upgrade-kernel-toolshuawei-euleros-2_0_sp8-upgrade-kernel-tools-libshuawei-euleros-2_0_sp8-upgrade-perfhuawei-euleros-2_0_sp8-upgrade-python-perfhuawei-euleros-2_0_sp8-upgrade-python3-perf | Sep 24, 2021 | Sep 24, 2021 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-kernelhuawei-euleros-2_0_sp9-upgrade-kernel-toolshuawei-euleros-2_0_sp9-upgrade-kernel-tools-libshuawei-euleros-2_0_sp9-upgrade-python3-perf | Sep 29, 2021 | Sep 24, 2021 | |
| Oracle_linux | — | oracle-linux-upgrade-kernel | Nov 18, 2021 | Jun 23, 2021 |
| Redhat_linux | redhat-upgrade-kernelredhat-upgrade-kernel-rt | Nov 10, 2021 | Nov 9, 2021 | |
| Rocky_linux | — | May 5, 2022 | Nov 16, 2021 | |
| Ubuntu | ubuntu-upgrade-linux-image-4-15-0-1022-dell300xubuntu-upgrade-linux-image-4-15-0-1075-oracleubuntu-upgrade-linux-image-4-15-0-1089-raspi2ubuntu-upgrade-linux-image-4-15-0-1103-gcpubuntu-upgrade-linux-image-4-15-0-1106-awsubuntu-upgrade-linux-image-4-15-0-1106-snapdragonubuntu-upgrade-linux-image-4-15-0-1118-azureubuntu-upgrade-linux-image-4-15-0-147-genericubuntu-upgrade-linux-image-4-15-0-147-generic-lpaeubuntu-upgrade-linux-image-4-15-0-147-lowlatencyubuntu-upgrade-linux-image-aws-hweubuntu-upgrade-linux-image-aws-lts-18-04ubuntu-upgrade-linux-image-azureubuntu-upgrade-linux-image-azure-lts-18-04ubuntu-upgrade-linux-image-dell300xubuntu-upgrade-linux-image-gcpubuntu-upgrade-linux-image-gcp-lts-18-04ubuntu-upgrade-linux-image-genericubuntu-upgrade-linux-image-generic-hwe-16-04ubuntu-upgrade-linux-image-generic-lpaeubuntu-upgrade-linux-image-gkeubuntu-upgrade-linux-image-lowlatencyubuntu-upgrade-linux-image-lowlatency-hwe-16-04ubuntu-upgrade-linux-image-oemubuntu-upgrade-linux-image-oracleubuntu-upgrade-linux-image-oracle-lts-18-04ubuntu-upgrade-linux-image-raspi2ubuntu-upgrade-linux-image-snapdragonubuntu-upgrade-linux-image-virtualubuntu-upgrade-linux-image-virtual-hwe-16-04 | Jun 24, 2021 | Jun 23, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub