An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c performs undesirable out-of-bounds speculation on pointer arithmetic leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory aka CID-f232326f6966. This affects pointer types that do not define a ptr_limit.

🗓️ 26 Mar 2021 07:00:00Reported by MicrosoftType

Linux kernel before 5.11.8 has a speculative out-of-bounds side-channel in verifier.c.

Reporter	Title	Published	Views	Family All 247
IBM Security Bulletins	Security Bulletin: Linux Kernel as used by IBM QRadar SIEM contains multiple vulnerabilities	3 Dec 202118:41	–	ibm
IBM Security Bulletins	Security Bulletin: Kernel as used by IBM QRadar Network Packet Capture contains multiple vulnerabilities	14 Oct 202120:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	11 Oct 202118:12	–	ibm
ATTACKERKB	CVE-2020-27170	20 Mar 202122:15	–	attackerkb
Android Security Bulletins	Pixel Update Bulletin—July 2021Stay organized with collectionsSave and categorize content based on your preferences.	7 Jul 202100:00	–	androidsecurity
BDU FSTEC	The vulnerability in the kernel/bpf/verifier.c file of the Linux operating system allows a hacker to gain unauthorized access to protected information.	6 Apr 202100:00	–	bdu_fstec
CBLMariner	CVE-2020-27170 affecting package kernel 5.10.189.1-1	9 Sep 202115:03	–	cbl_mariner
CBLMariner	CVE-2020-27170 affecting package kernel for versions less than 5.10.78.1-1	9 Apr 202206:52	–	cbl_mariner
Tenable Nessus	CentOS 7 : kernel (RHSA-2021:2314)	14 Jun 202100:00	–	nessus
Tenable Nessus	Debian DLA-2610-1 : linux-4.19 security update	31 Mar 202100:00	–	nessus