The eBPF ALU32 bounds tracking for bitwise ops (AND, OR and XOR) in the Linux kernel did not properly update 32-bit bounds, which could be turned into out of bounds reads and writes in the Linux kernel and therefore, arbitrary code execution. This issue was fixed via commit 049c4e13714e ("bpf: Fix alu32 const subreg bound tracking on bitwise operations") (v5.13-rc4) and backported to the stable kernels in v5.12.4, v5.11.21, and v5.10.37. The AND/OR issues were introduced by commit 3f50f132d840 ("bpf: Verifier, do explicit ALU32 bounds tracking") (5.7-rc1) and the XOR variant was introduced by 2921c90d4718 ("bpf:Fix a verifier failure with xor") ( 5.10-rc1).
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernel-tools-develUpgrade perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel | Jul 4, 2022 | Jun 4, 2021 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 4, 2021 |
| Suse | — | Upgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade kernel-default-livepatchUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-kvmsmallUpgrade kernel-sourceUpgrade kernel-azure-optionalUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-preemptUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-64kbUpgrade kernel-symsUpgrade kernel-debug-livepatch-develUpgrade kernel-syms-azureUpgrade kernel-source-azureUpgrade kernel-azure-extraUpgrade reiserfs-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-preemptUpgrade dlm-kmp-64kbUpgrade kernel-default-extraUpgrade kernel-64kb-livepatch-develUpgrade kernel-preemptUpgrade kernel-obs-qaUpgrade kernel-docs-htmlUpgrade kernel-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-azure-develUpgrade kernel-default-baseUpgrade dlm-kmp-defaultUpgrade kernel-preempt-livepatch-develUpgrade kernel-develUpgrade dlm-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-defaultUpgrade kernel-default-optionalUpgrade kselftests-kmp-defaultUpgrade kernel-source-vanillaUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-preempt-optionalUpgrade dlm-kmp-preemptUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-preemptUpgrade kernel-preempt-develUpgrade kernel-preempt-extraUpgrade kselftests-kmp-preemptUpgrade cluster-md-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-preemptUpgrade ocfs2-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-debugUpgrade gfs2-kmp-azureUpgrade kernel-azureUpgrade kselftests-kmp-azure | Jun 16, 2021 | May 11, 2021 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.11.0-17-generic-lpaeUpgrade linux-image-5.8.0-1033-awsUpgrade linux-image-azureUpgrade linux-image-genericUpgrade linux-image-5.11.0-17-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-5.8.0-1024-raspiUpgrade linux-image-generic-64kUpgrade linux-image-oem-20.04Upgrade linux-image-5.11.0-1008-raspiUpgrade linux-image-5.11.0-1005-azureUpgrade linux-image-5.8.0-53-generic-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-5.8.0-53-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-raspiUpgrade linux-image-5.10.0-1026-oemUpgrade linux-image-5.11.0-17-generic-64kUpgrade linux-image-gkeUpgrade linux-image-5.8.0-53-genericUpgrade linux-image-5.8.0-1027-kvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.11.0-1007-kvmUpgrade linux-image-5.11.0-1007-awsUpgrade linux-image-5.8.0-53-generic-lpaeUpgrade linux-image-5.8.0-1024-raspi-nolpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-5.11.0-1007-gcpUpgrade linux-image-5.11.0-17-genericUpgrade linux-image-oracleUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.8.0-1029-oracleUpgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-kvmUpgrade linux-image-5.8.0-1032-azureUpgrade linux-image-5.11.0-1006-oracleUpgrade linux-image-5.11.0-1008-raspi-nolpaeUpgrade linux-image-5.8.0-1031-gcp | May 12, 2021 | May 11, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 4, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub