arch/mips/net/bpf_jit.c in the Linux kernel before 5.4.10 can generate undesirable machine code when transforming unprivileged cBPF programs, allowing execution of arbitrary code within the kernel context. This occurs because conditional branches can exceed the 128 KB limit of the MIPS architecture.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade microvm-kernel-debuginfoUpgrade microvm-kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernelUpgrade microvm-kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade microvm-kernel-headersUpgrade perf-debuginfoUpgrade kernel-livepatch-4.14.252-195.481Upgrade perfUpgrade microvm-kernel-debuginfo-common-aarch64Upgrade microvm-kernelUpgrade python-perf | Nov 5, 2021 | Sep 20, 2021 |
| Debian | — | Upgrade linux | Mar 10, 2022 | Sep 20, 2021 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libs-develUpgrade perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-develUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libs | Feb 28, 2022 | Sep 20, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-tools | Jan 28, 2022 | Sep 20, 2021 |
| Ubuntu | — | Upgrade linux-gcp-fipsUpgrade linux-aws-fipsUpgrade linux-fipsUpgrade linux-azure-fipsUpgrade linux-hwe-5.13 | Nov 19, 2024 | Sep 20, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub