Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:33278
HistoryDec 12, 2021 - 11:36 p.m.

Side-channel Attack

2021-12-1223:36:15
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
39

EPSS

0.001

Percentile

19.5%

kernel is vulnerable to side-channel attack. kernel/bpf/verifier.c performs undesirable out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory.