A vulnerability was found in the Linux kernel's EBPF verifier when handling internal data structures. Internal memory locations could be returned to userspace. A local attacker with the permissions to insert eBPF code to the kernel can use this to leak internal kernel memory details defeating some of the exploit mitigations in place for the kernel.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.294-220.533Upgrade kernel-toolsUpgrade perf-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernelUpgrade bpftool-debuginfo | Oct 11, 2022 | Aug 24, 2022 |
| Amazon_linux | — | Upgrade kernel | Oct 11, 2022 | Feb 10, 2022 |
| Debian | — | Upgrade linux | Oct 3, 2022 | Aug 24, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | May 9, 2022 | Apr 11, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade perfUpgrade kernelUpgrade bpftoolUpgrade kernel-develUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-headers | Apr 11, 2022 | Apr 11, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-tools | Apr 19, 2022 | Apr 11, 2022 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Jan 28, 2022 |
| Suse | — | Upgrade kernel-syms-azureUpgrade kernel-azure-optionalUpgrade kernel-devel-azureUpgrade kernel-azureUpgrade cluster-md-kmp-azureUpgrade kernel-source-azureUpgrade kernel-azure-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-azure-develUpgrade gfs2-kmp-azureUpgrade dlm-kmp-azureUpgrade kernel-azure-extraUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-azure | Feb 11, 2022 | Feb 10, 2022 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1158-azureUpgrade linux-image-5.4.0-1076-kvmUpgrade linux-image-4.15.0-1147-aws-hweUpgrade linux-image-5.4.0-1092-azure-fdeUpgrade linux-image-virtualUpgrade linux-image-5.4.0-1071-raspiUpgrade linux-image-oracleUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1034-ibmUpgrade linux-image-4.15.0-201-lowlatencyUpgrade linux-image-5.4.0-1084-gkeUpgrade linux-image-5.4.0-128-genericUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-awsUpgrade linux-image-gke-5.4Upgrade linux-image-4.15.0-1147-awsUpgrade linux-image-kvmUpgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1047-bluefieldUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-snapdragonUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-4.15.0-201-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-gkeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1090-gcpUpgrade linux-image-dell300xUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oem-osp1Upgrade linux-image-raspi2Upgrade linux-image-aws-hweUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-128-generic-lpaeUpgrade linux-image-4.15.0-1143-snapdragonUpgrade linux-image-azure-fdeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-1054-gkeopUpgrade linux-image-aws-lts-20.04Upgrade linux-image-4.15.0-1133-kvmUpgrade linux-image-genericUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-4.15.0-1125-raspi2Upgrade linux-image-4.15.0-1112-oracleUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1086-awsUpgrade linux-image-4.15.0-1058-dell300xUpgrade linux-image-ibmUpgrade linux-image-4.15.0-201-genericUpgrade linux-image-gkeop-5.4Upgrade linux-image-gkeopUpgrade linux-image-lowlatencyUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1142-gcpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-azure-lts-18.04Upgrade linux-image-gcpUpgrade linux-image-5.4.0-1084-oracleUpgrade linux-image-5.4.0-128-lowlatency | Oct 11, 2022 | Feb 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 24, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub