arch/mips/net/bpf_jit.c in the Linux kernel before 5.4.10 can generate undesirable machine code when transforming unprivileged cBPF programs, allowing execution of arbitrary code within the kernel context. This occurs because conditional branches can exceed the 128 KB limit of the MIPS architecture.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernel-tools-develUpgrade microvm-kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-develUpgrade kernelUpgrade microvm-kernel-debuginfo-common-x86_64Upgrade microvm-kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade microvm-kernel-headersUpgrade microvm-kernel-debuginfo-common-aarch64Upgrade perfUpgrade python-perfUpgrade microvm-kernelUpgrade kernel-livepatch-4.14.252-195.481Upgrade perf-debuginfo | Nov 5, 2021 | Sep 20, 2021 |
| Debian | — | Upgrade linux | Mar 10, 2022 | Sep 20, 2021 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade bpftoolUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-develUpgrade perfUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs-develUpgrade kernel-tools | Feb 28, 2022 | Sep 20, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Jan 28, 2022 | Sep 20, 2021 |
| Ubuntu | — | Upgrade linux-gcp-fipsUpgrade linux-aws-fipsUpgrade linux-hwe-5.13Upgrade linux-fipsUpgrade linux-azure-fips | Nov 19, 2024 | Sep 20, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub