The check_alu_op() function in kernel/bpf/verifier.c in the Linux kernel through v5.16-rc5 did not properly update bounds while handling the mov32 instruction, which allows local users to obtain potentially sensitive address information, aka a "pointer leak."
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 11, 2022 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 11, 2022 |
| Suse | — | Upgrade reiserfs-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-macrosUpgrade kernel-debugUpgrade kernel-preempt-livepatch-develUpgrade dtb-hisiliconUpgrade dtb-amlogicUpgrade dtb-broadcomUpgrade kernel-azure-extraUpgrade dtb-marvellUpgrade dlm-kmp-azureUpgrade kernel-docsUpgrade kernel-livepatch-5_3_18-150300_59_60-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-appleUpgrade kernel-debug-develUpgrade kernel-docs-htmlUpgrade dlm-kmp-preemptUpgrade kernel-64kb-optionalUpgrade kernel-obs-qaUpgrade kernel-preempt-optionalUpgrade kernel-default-baseUpgrade dtb-renesasUpgrade kernel-preempt-extraUpgrade dtb-socionextUpgrade gfs2-kmp-preemptUpgrade kernel-debug-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade dtb-amdUpgrade dtb-armUpgrade kernel-defaultUpgrade dtb-nvidiaUpgrade kernel-default-extraUpgrade dtb-sprdUpgrade reiserfs-kmp-64kbUpgrade dtb-apmUpgrade dlm-kmp-defaultUpgrade kernel-symsUpgrade kselftests-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-livepatch-5_14_21-150400_24_11-defaultUpgrade kernel-azure-livepatch-develUpgrade dtb-freescaleUpgrade kernel-azure-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-devel-azureUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-64kbUpgrade dtb-exynosUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-preemptUpgrade kernel-develUpgrade dtb-allwinnerUpgrade reiserfs-kmp-preemptUpgrade dtb-alUpgrade kernel-default-livepatchUpgrade kernel-syms-azureUpgrade kernel-source-vanillaUpgrade kernel-default-optionalUpgrade gfs2-kmp-64kbUpgrade kernel-preemptUpgrade kernel-kvmsmallUpgrade kernel-default-develUpgrade kernel-preempt-develUpgrade cluster-md-kmp-preemptUpgrade cluster-md-kmp-azureUpgrade kernel-azure-optionalUpgrade dtb-caviumUpgrade gfs2-kmp-defaultUpgrade dtb-lgUpgrade kselftests-kmp-azureUpgrade kernel-obs-buildUpgrade dtb-amazonUpgrade kernel-64kbUpgrade kernel-azureUpgrade dtb-xilinxUpgrade kernel-zfcpdumpUpgrade kernel-source-azureUpgrade dtb-zteUpgrade kernel-64kb-develUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-preemptUpgrade kernel-sourceUpgrade dtb-rockchipUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade dtb-mediatekUpgrade gfs2-kmp-azureUpgrade dtb-alteraUpgrade kernel-kvmsmall-develUpgrade dtb-qcom | Oct 26, 2022 | Feb 11, 2022 |
| Ubuntu | — | Upgrade linux-image-5.13.0-37-generic-lpaeUpgrade linux-image-5.13.0-1022-raspi-nolpaeUpgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-5.13.0-1021-gcpUpgrade linux-image-5.13.0-1022-raspiUpgrade linux-image-oracleUpgrade linux-image-5.13.0-1025-oracleUpgrade linux-image-5.13.0-37-genericUpgrade linux-image-gcpUpgrade linux-image-awsUpgrade linux-image-5.13.0-37-lowlatencyUpgrade linux-image-5.13.0-1018-kvmUpgrade linux-image-genericUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.13.0-1023-oracleUpgrade linux-image-azureUpgrade linux-image-generic-64kUpgrade linux-image-5.13.0-37-generic-64kUpgrade linux-image-5.13.0-1019-awsUpgrade linux-image-oem-20.04Upgrade linux-image-gkeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-5.13.0-1021-azure | Mar 22, 2022 | Feb 11, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Feb 11, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub