PT-2024-11304 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.12.0+ Description: A use-after-free vulnerability has been identified in the Linux kernel, specifically in the bpf Berkeley Packet Filter subsystem. The issue arises when subprograms call map poke track but fa...

OESA-2021-1176 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c performs undesirable out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain...

Medium: kernel

Issue Overview: A flaw was found in kernel/bpf/verifier.c in BPF in the Linux kernel. An incorrect limit is enforced for pointer arithmetic operations which can be abused to perform out-of-bounds reads and writes in kernel memory, leading to local privilege escalation. The highest threat from thi...

SUSE SLES15 Security Update : kernel (Live Patch 0 for SLE 15 SP3) (SUSE-SU-2021:2198-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2198-1 advisory. This update for the Linux Kernel 5.3.18-57 fixes several issues. The following issues were fixed: - CVE-2021-3489: Fixed an issue where the eBP...

EulerOS 2.0 SP9 : kernel (EulerOS-SA-2021-2051)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the Nosy driver in the Linux kernel. This issue allows a device to be inserted twice into a doubly-linked list, leading to a...

UVI-2021-1000986 bpf: Fix leakage under speculation on mispredicted branches

bpf: Fix leakage under speculation on mispredicted branches This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...

GSD-2021-1000986 bpf: Fix leakage under speculation on mispredicted branches

bpf: Fix leakage under speculation on mispredicted branches This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...

PT-2021-25538

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v4.15 through v5.12.12 Description: The issue is related to a leakage under speculation on mispredicted branches in the bpf component. The actual impact and attack plausibility have not yet been proven. Recommendations:...

PT-2021-29532

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v4.15 through v5.12.12 Description The issue is related to a leakage under speculation on mispredicted branches in the bpf component. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2021-29451

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.15 through 5.10.45 Description The issue is related to a leakage under speculation on mispredicted branches in the bpf component. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2021-25457

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.46 Description: The issue concerns a leakage under speculation on mispredicted branches in the bpf component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 5.10.46 and fixes at least the following security issues: In kernel/bpf/verifier.c in the Linux kernel before 5.12.13, a branch can be mispredicted e.g., because of type confusion and consequently an unprivileged BPF program can read arbitrary memory...

MGASA-2021-0295 Updated kernel-linus packages fix security vulnerabilities

This kernel-linus update is based on upstream 5.10.46 and fixes at least the following security issues: In kernel/bpf/verifier.c in the Linux kernel before 5.12.13, a branch can be mispredicted e.g., because of type confusion and consequently an unprivileged BPF program can read arbitrary memory...

MGASA-2021-0296 Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 5.10.46 and fixes at least the following security issues: In kernel/bpf/verifier.c in the Linux kernel before 5.12.13, a branch can be mispredicted e.g., because of type confusion and consequently an unprivileged BPF program can read arbitrary memory...

PT-2021-29264

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.6 through v5.12.9 Description The issue concerns buggy SELinux lockdown permission checks in the Linux Kernel, related to bpf, lockdown, and audit. The actual impact and attack plausibility have not yet been proven...

PT-2021-29233

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.6 through v5.10.42 Description The issue concerns buggy SELinux lockdown permission checks in the Linux Kernel, related to bpf, lockdown, and audit. The actual impact and attack plausibility have not yet been proven...

PT-2021-25239

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.6 through v5.10.42 Description The issue concerns buggy SELinux lockdown permission checks in the Linux Kernel, related to bpf, lockdown, and audit. The actual impact and attack plausibility have not yet been proven...

PT-2021-25270

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.6 through v5.12.9 Description: The issue concerns buggy SELinux lockdown permission checks in the Linux Kernel, related to bpf, lockdown, and audit. The actual impact and attack plausibility have not yet been proven...

AZL-6564 CVE-2021-33624 affecting package kernel for versions less than 5.10.78.1-1

In kernel/bpf/verifier.c in the Linux kernel before 5.12.13, a branch can be mispredicted e.g., because of type confusion and consequently an unprivileged BPF program can read arbitrary memory locations via a side-channel attack, aka CID-9183671af6db...

CVE-2021-33624

In kernel/bpf/verifier.c in the Linux kernel before 5.12.13, a branch can be mispredicted e.g., because of type confusion and consequently an unprivileged BPF program can read arbitrary memory locations via a side-channel attack, aka CID-9183671af6db...