Incorrect verifier pruning in BPF in Linux Kernel >=5.4 leads to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape.
CVSS Details
- CVSS 3.1 Base Score: 10
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-develUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-modulesUpgrade perfUpgrade kernel-debug-coreUpgrade kernel-docUpgrade kernel-toolsUpgrade kernel-debugUpgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel-zfcpdumpUpgrade python3-perfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-tools-libsUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-coreUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libs-develUpgrade bpftool | Dec 4, 2023 | Sep 20, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernelUpgrade perfUpgrade kernel-headersUpgrade kernel-livepatch-5.15.110-70.141Upgrade kernel-develUpgrade kernel-livepatch-5.10.179-166.674 | Sep 21, 2023 | Sep 20, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade python3-perf-debuginfoUpgrade kernelUpgrade python3-perfUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.27-43.48Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools | Feb 17, 2025 | Apr 19, 2023 |
| Centos_linux | — | Upgrade kernelUpgrade kpatch-patch-4_18_0-513_5_1Upgrade kpatch-patch-4_18_0-513_5_1-debugsourceUpgrade kpatch-patch-4_18_0-513_5_1-debuginfoUpgrade kernel-rt | Nov 29, 2023 | Sep 20, 2023 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Sep 20, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libs | Jan 10, 2024 | Sep 20, 2023 |
| Oracle_linux | — | Upgrade kernel | Dec 2, 2023 | Apr 19, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 29, 2023 | Sep 20, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-rtUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-kvmUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-coreUpgrade kernel-rt-devel | Mar 5, 2024 | Sep 20, 2023 |
| Suse | — | Upgrade dtb-rockchipUpgrade dtb-caviumUpgrade kernel-source-vanillaUpgrade dlm-kmp-rtUpgrade kernel-obs-buildUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kb-extraUpgrade dtb-armUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-azureUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-rt-develUpgrade dtb-allwinnerUpgrade dlm-kmp-defaultUpgrade dtb-sprdUpgrade kernel-rt-optionalUpgrade dtb-qcomUpgrade kernel-rt-livepatchUpgrade dtb-nvidiaUpgrade kernel-default-base-rebuildUpgrade kernel-rt-vdsoUpgrade kernel-default-baseUpgrade kernel-preempt-develUpgrade kernel-rt-extraUpgrade kernel-defaultUpgrade dtb-alUpgrade kernel-debug-vdsoUpgrade kernel-docsUpgrade gfs2-kmp-defaultUpgrade dtb-socionextUpgrade dtb-renesasUpgrade ocfs2-kmp-defaultUpgrade dtb-zteUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-rtUpgrade kernel-source-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-rtUpgrade reiserfs-kmp-azureUpgrade kernel-azure-develUpgrade ocfs2-kmp-azureUpgrade kernel-zfcpdumpUpgrade dtb-alteraUpgrade kernel-default-extraUpgrade cluster-md-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-source-azureUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade dtb-exynosUpgrade cluster-md-kmp-azureUpgrade kernel-syms-azureUpgrade gfs2-kmp-rtUpgrade dtb-marvellUpgrade kernel-symsUpgrade kernel-obs-qaUpgrade dtb-amazonUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-64kbUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-optionalUpgrade dtb-amlogicUpgrade dlm-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-default-develUpgrade kernel-64kb-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-default-livepatchUpgrade dtb-hisiliconUpgrade kernel-64kb-optionalUpgrade kernel-debug-develUpgrade kernel-devel-rtUpgrade kernel-macrosUpgrade kernel-debugUpgrade kernel-sourceUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-vdsoUpgrade dtb-lgUpgrade dtb-xilinxUpgrade kernel-rt_debug-develUpgrade dtb-apmUpgrade kernel-azure-optionalUpgrade kernel-develUpgrade kernel-default-vdsoUpgrade reiserfs-kmp-defaultUpgrade kernel-devel-azureUpgrade kernel-rt-livepatch-develUpgrade dtb-freescaleUpgrade kernel-kvmsmallUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-preemptUpgrade kernel-azure-livepatch-develUpgrade dtb-broadcomUpgrade dtb-appleUpgrade dtb-amdUpgrade ocfs2-kmp-64kb | Nov 3, 2023 | Sep 20, 2023 |
| Ubuntu | — | Upgrade linux-image-raspi2Upgrade linux-image-5.4.0-1070-bluefieldUpgrade linux-image-intel-iotgUpgrade linux-image-gkeop-5.15Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-79-generic-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1043-azure-fdeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1035-raspiUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-162-generic-lpaeUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1025-gkeopUpgrade linux-image-6.0.0-1021-oemUpgrade linux-image-nvidiaUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1039-gkeUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1037-intel-iotgUpgrade linux-image-5.4.0-1098-kvmUpgrade linux-image-bluefieldUpgrade linux-image-intelUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1030-nvidiaUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1029-xilinx-zynqmpUpgrade linux-image-gkeopUpgrade linux-image-genericUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1056-ibmUpgrade linux-image-generic-64kUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-oem-20.04dUpgrade linux-image-virtualUpgrade linux-image-gcpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1039-gcpUpgrade linux-image-5.4.0-1109-awsUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1045-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1042-awsUpgrade linux-image-5.15.0-1030-nvidia-lowlatencyUpgrade linux-image-azure-cvmUpgrade linux-image-5.4.0-1108-oracleUpgrade linux-image-5.15.0-1045-azure-fdeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1039-kvmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-79-lowlatency-64kUpgrade linux-image-5.15.0-79-generic-lpaeUpgrade linux-image-5.4.0-1021-iotUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-162-lowlatencyUpgrade linux-image-awsUpgrade linux-image-5.4.0-1112-gcpUpgrade linux-image-5.15.0-1041-awsUpgrade linux-image-5.4.0-162-genericUpgrade linux-image-ibmUpgrade linux-image-oemUpgrade linux-image-5.4.0-1093-raspiUpgrade linux-image-azure-lts-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-1115-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1040-oracleUpgrade linux-image-aws-lts-22.04Upgrade linux-image-azureUpgrade linux-image-kvmUpgrade linux-image-5.15.0-79-lowlatencyUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1035-ibmUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-1076-gkeopUpgrade linux-image-5.15.0-79-genericUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpae | Aug 18, 2023 | Aug 17, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 20, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub