A vulnerability was found in the Linux kernel's eBPF verifier when handling internal data structures. Internal memory locations could be returned to userspace. A local attacker with the permissions to insert eBPF code to the kernel can use this to leak internal kernel memory details defeating some of the exploit mitigations in place for the kernel. This flaws affects kernel versions < v5.16-rc6
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 4, 2022 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 4, 2022 |
| Suse | — | Upgrade reiserfs-kmp-azureUpgrade gfs2-kmp-azureUpgrade dtb-mediatekUpgrade ocfs2-kmp-azureUpgrade dtb-exynosUpgrade kernel-develUpgrade dtb-xilinxUpgrade dtb-armUpgrade gfs2-kmp-defaultUpgrade dtb-alteraUpgrade kernel-azure-optionalUpgrade dtb-lgUpgrade ocfs2-kmp-defaultUpgrade kernel-source-azureUpgrade dtb-rockchipUpgrade kernel-64kb-develUpgrade kernel-kvmsmallUpgrade kernel-default-base-rebuildUpgrade kernel-sourceUpgrade kernel-azureUpgrade kernel-source-vanillaUpgrade kselftests-kmp-64kbUpgrade dtb-qcomUpgrade cluster-md-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-develUpgrade kernel-devel-azureUpgrade kernel-symsUpgrade dtb-caviumUpgrade kernel-kvmsmall-develUpgrade kernel-syms-azureUpgrade kernel-default-optionalUpgrade kernel-obs-buildUpgrade dlm-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-zfcpdumpUpgrade kernel-debugUpgrade kernel-default-livepatchUpgrade kernel-64kb-extraUpgrade kernel-docs-htmlUpgrade dtb-broadcomUpgrade kernel-defaultUpgrade dtb-hisiliconUpgrade reiserfs-kmp-64kbUpgrade dtb-amdUpgrade kernel-default-baseUpgrade dtb-socionextUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-docsUpgrade dtb-freescaleUpgrade dtb-amlogicUpgrade dtb-apmUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-default-livepatch-develUpgrade dtb-appleUpgrade dlm-kmp-azureUpgrade dtb-sprdUpgrade dtb-renesasUpgrade kernel-64kb-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-debug-develUpgrade kernel-default-extraUpgrade kernel-azure-extraUpgrade kernel-default-develUpgrade kernel-kvmsmall-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-macrosUpgrade dtb-marvellUpgrade kernel-obs-qaUpgrade dtb-amazonUpgrade kselftests-kmp-azure | Oct 26, 2022 | Feb 4, 2022 |
| Ubuntu | — | Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-5.13.0-37-genericUpgrade linux-image-azureUpgrade linux-image-kvmUpgrade linux-image-5.13.0-37-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-5.13.0-37-generic-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-awsUpgrade linux-image-5.13.0-1025-oracleUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-5.13.0-1021-azureUpgrade linux-image-5.13.0-1023-oracleUpgrade linux-image-5.13.0-37-lowlatencyUpgrade linux-image-5.13.0-1022-raspi-nolpaeUpgrade linux-image-5.13.0-1021-gcpUpgrade linux-image-5.13.0-1022-raspiUpgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-20.04Upgrade linux-image-generic-64kUpgrade linux-image-5.14.0-1022-oemUpgrade linux-image-gkeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.13.0-1018-kvmUpgrade linux-image-5.13.0-1019-aws | Feb 9, 2022 | Feb 4, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub