arch/mips/net/bpf_jit.c in the Linux kernel before 5.4.10 can generate undesirable machine code when transforming unprivileged cBPF programs, allowing execution of arbitrary code within the kernel context. This occurs because conditional branches can exceed the 128 KB limit of the MIPS architecture.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-headersUpgrade microvm-kernel-develUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-develUpgrade microvm-kernel-debuginfo-common-x86_64Upgrade microvm-kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade microvm-kernelUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-4.14.252-195.481Upgrade microvm-kernel-headersUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade microvm-kernel-debuginfo-common-aarch64 | Nov 5, 2021 | Sep 20, 2021 |
| Debian | — | Upgrade linux | Mar 10, 2022 | Sep 20, 2021 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libs-develUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-develUpgrade bpftoolUpgrade perf | Feb 28, 2022 | Sep 20, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Jan 28, 2022 | Sep 20, 2021 |
| Ubuntu | — | Upgrade linux-gcp-fipsUpgrade linux-aws-fipsUpgrade linux-azure-fipsUpgrade linux-fipsUpgrade linux-hwe-5.13 | Nov 19, 2024 | Sep 20, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub