The check_alu_op() function in kernel/bpf/verifier.c in the Linux kernel through v5.16-rc5 did not properly update bounds while handling the mov32 instruction, which allows local users to obtain potentially sensitive address information, aka a "pointer leak."
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 11, 2022 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 11, 2022 |
| Suse | — | Upgrade dtb-alteraUpgrade kernel-devel-azureUpgrade kernel-64kbUpgrade kernel-kvmsmallUpgrade kernel-64kb-develUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-preemptUpgrade dlm-kmp-64kbUpgrade dtb-alUpgrade kernel-64kb-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-syms-azureUpgrade kselftests-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-sourceUpgrade kernel-default-livepatchUpgrade kernel-source-vanillaUpgrade kselftests-kmp-preemptUpgrade dtb-mediatekUpgrade kernel-default-optionalUpgrade kernel-kvmsmall-develUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-preemptUpgrade dtb-amazonUpgrade dtb-rockchipUpgrade gfs2-kmp-defaultUpgrade dtb-freescaleUpgrade dtb-zteUpgrade dtb-xilinxUpgrade dtb-allwinnerUpgrade kernel-source-azureUpgrade kselftests-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-azureUpgrade kernel-preempt-develUpgrade cluster-md-kmp-azureUpgrade kernel-default-develUpgrade cluster-md-kmp-preemptUpgrade kernel-develUpgrade dtb-exynosUpgrade dtb-caviumUpgrade kernel-preemptUpgrade dtb-lgUpgrade gfs2-kmp-64kbUpgrade dtb-qcomUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-defaultUpgrade dtb-hisiliconUpgrade kernel-64kb-optionalUpgrade kernel-obs-qaUpgrade kernel-debug-develUpgrade dtb-appleUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-azureUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-preempt-livepatch-develUpgrade kernel-docsUpgrade kernel-macrosUpgrade dtb-sprdUpgrade dtb-broadcomUpgrade dtb-amlogicUpgrade kernel-64kb-extraUpgrade kernel-defaultUpgrade dtb-apmUpgrade kernel-livepatch-5_14_21-150400_24_11-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-preempt-extraUpgrade kernel-debug-livepatch-develUpgrade dtb-renesasUpgrade gfs2-kmp-preemptUpgrade kernel-azure-extraUpgrade dtb-armUpgrade dtb-marvellUpgrade kernel-docs-htmlUpgrade kernel-preempt-optionalUpgrade dtb-amdUpgrade kernel-debugUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-socionextUpgrade kernel-livepatch-5_3_18-150300_59_60-defaultUpgrade kernel-symsUpgrade kernel-default-extraUpgrade dtb-nvidiaUpgrade dlm-kmp-preemptUpgrade kernel-default-livepatch-devel | Oct 26, 2022 | Feb 11, 2022 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.13.0-37-generic-64kUpgrade linux-image-raspiUpgrade linux-image-5.13.0-1021-azureUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.13.0-1019-awsUpgrade linux-image-5.13.0-1018-kvmUpgrade linux-image-generic-64kUpgrade linux-image-genericUpgrade linux-image-5.13.0-1023-oracleUpgrade linux-image-azureUpgrade linux-image-oem-20.04Upgrade linux-image-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-awsUpgrade linux-image-5.13.0-37-genericUpgrade linux-image-5.13.0-37-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-5.13.0-1022-raspi-nolpaeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.13.0-37-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-5.13.0-1022-raspiUpgrade linux-image-5.13.0-1021-gcpUpgrade linux-image-gcpUpgrade linux-image-5.13.0-1025-oracleUpgrade linux-image-lowlatency-hwe-20.04 | Mar 22, 2022 | Feb 11, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Feb 11, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub