|
Vulnerabilities
< Back

CVE-2021-20239

Updated on 28 May 2021

Severity

3.3 Low severity

Details

CVSS score
3.3
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CWE ID
Links
NISTCIRCLRHELUbuntu

Overview

About vulnerability

A flaw was found in the Linux kernel in versions before 5.4.92 in the BPF protocol. This flaw allows an attacker with a local account to leak information about kernel internal addresses. The highest threat from this vulnerability is to confidentiality.

Details

Affected product:
AlmaLinux 8 , CentOS 6 , CentOS 6 ELS , CentOS 6 plus , CentOS 7 , CentOS 7 ELS , CentOS 7 plus , CentOS 8 , CentOS 8.4 ELS , CentOS 8.5 ELS , CentOS Stream 8 ELS , CloudLinux 6 ELS , CloudLinux 7 ELS , CloudLinux OS 6 , CloudLinux OS 6h , CloudLinux OS 7 , CloudLinux OS 7h , CloudLinux OS 8 , Debian 10 , Debian 10 cloud , Debian 9 , Endurance 7 eig 3.10 , Endurance 7 eig 4.14 , OpenVZ 6 , Oracle Linux 6 ELS , Oracle Linux 7 ELS , Proofpoint , Proxmox VE 5 , Proxmox VE 6 , RHEL 6 , RHEL 7 , RHEL 7 ELS , RHEL 8 , Rocky Linux 8 , Scientific 6 , Ubuntu 14.04 , Ubuntu 14.04 ESM , Ubuntu 16.04 , Ubuntu 16.04 ELS , Ubuntu 16.04 ESM , Ubuntu 18.04 , Ubuntu 18.04 ELS , Ubuntu 20.04 , Upstream 4.14 , Upstream 4.19 , Upstream 5.0
Affected packages:
kernel @ 3.10.0 (+74 more)
A flaw was found in the Linux kernel in versions before 5.4.92 in the BPF protocol. This flaw allows an attacker with a local account to leak information about kernel internal addresses. The highest threat from this vulnerability is to confidentiality.

Fixes

KernelCare state

Live-patch status from KernelCare for each operating system.

Operating system Status Covered kernels
AlmaLinux 8 Released
11 kernels
  • 4.18.0-305.el8
  • 4.18.0-305.25.1.el8_4
  • 4.18.0-305.12.1.el8_4
  • 4.18.0-240.22.1.el8_3
  • 4.18.0-305.17.1.el8_4
  • 4.18.0-240.15.1.el8_3
  • 4.18.0-305.3.1.el8_4
  • 4.18.0-240.el8
  • 4.18.0-305.10.2.el8_4
  • 4.18.0-305.19.1.el8_4
  • 4.18.0-305.7.1.el8_4
CentOS 8 Released
18 kernels
  • 4.18.0-305.25.1.el8_4
  • 4.18.0-305.10.2.el8_4
  • 4.18.0-193.1.2.el8_2
  • 4.18.0-193.28.1.el8_2
  • 4.18.0-240.10.1.el8_3
  • 4.18.0-240.el8
  • 4.18.0-305.17.1.el8_4
  • 4.18.0-305.7.1.el8_4
  • 4.18.0-240.15.1.el8_3
  • 4.18.0-240.1.1.el8_3
  • 4.18.0-193.el8
  • 4.18.0-305.19.1.el8_4
  • 4.18.0-305.12.1.el8_4
  • 4.18.0-193.6.3.el8_2
  • 4.18.0-240.22.1.el8_3
  • 4.18.0-193.19.1.el8_2
  • 4.18.0-305.3.1.el8
  • 4.18.0-193.14.2.el8_2
CloudLinux OS 7h Released
8 kernels
  • 4.18.0-305.12.1.lve.el7h
  • 4.18.0-305.17.1.lve.el7h
  • 4.18.0-305.19.1.lve.el7h
  • 4.18.0-305.10.2.2.lve.el7h
  • 4.18.0-305.10.2.lve.el7h
  • 4.18.0-193.28.1.lve1.el7h
  • 4.18.0-305.7.1.lve.el7h
  • 4.18.0-305.lve.el7h
CloudLinux OS 8 Released
8 kernels
  • 4.18.0-305.lve.el8
  • 4.18.0-305.12.1.lve.el8
  • 4.18.0-305.17.1.lve.el8
  • 4.18.0-305.19.1.lve.el8
  • 4.18.0-305.7.1.lve.el8
  • 4.18.0-305.10.2.2.lve.el8
  • 4.18.0-305.10.2.lve.el8
  • 4.18.0-193.28.1.lve1.el8
Endurance 7 eig 4.14 Ready For Release —
Oracle Linux 8 Released
21 kernels
  • 4.18.0-193.19.1.el8_2
  • 4.18.0-193.13.2.el8_2
  • 4.18.0-305.17.1.el8_4
  • 4.18.0-305.19.1.el8_4
  • 4.18.0-240.el8
  • 4.18.0-305.3.1.el8_4
  • 4.18.0-305.7.1.el8_4
  • 4.18.0-240.1.1.el8_3
  • 4.18.0-240.10.1.el8_3
  • 4.18.0-305.25.1.el8_4
  • 4.18.0-193.14.3.el8_2
  • 4.18.0-193.el8
  • 4.18.0-193.1.2.el8_2
  • 4.18.0-240.8.1.el8_3
  • 4.18.0-240.22.1.el8_3
  • 4.18.0-193.6.3.el8_2
  • 4.18.0-193.28.1.el8_2
  • 4.18.0-305.el8
  • 4.18.0-240.15.1.el8_3
  • 4.18.0-305.10.2.el8_4
  • 4.18.0-305.12.1.el8_4
Proofpoint Ready For Release —
Proxmox VE 6 Released
16 kernels
  • 5.4.41-1-pve_5.4.41-1
  • 5.4.44-1-pve_5.4.44-1
  • 5.4.60-1-pve_5.4.60-1
  • 5.4.78-1-pve_5.4.78-1
  • 5.4.73-1-pve_5.4.73-1
  • 5.4.55-1-pve_5.4.55-1
  • 5.4.22-1-pve_5.4.22-1
  • 5.4.24-1-pve_5.4.24-1
  • 5.4.27-1-pve_5.4.27-1
  • 5.4.30-1-pve_5.4.30-1
  • 5.4.78-2-pve_5.4.78-2
  • 5.4.86-1-pve_5.4.86-1
  • 5.4.44-2-pve_5.4.44-2
  • 5.4.60-1-pve_5.4.60-2
  • 5.4.65-1-pve_5.4.65-1
  • 5.4.34-1-pve_5.4.34-2
RHEL 8 Released
22 kernels
  • 4.18.0-193.1.2.el8_2
  • 4.18.0-305.10.2.el8_4
  • 4.18.0-305.19.1.el8_4
  • 4.18.0-240.8.1.el8_3
  • 4.18.0-193.28.1.el8_2
  • 4.18.0-193.13.2.el8_2
  • 4.18.0-193.el8
  • 4.18.0-305.7.1.el8_4
  • 4.18.0-305.17.1.el8_4
  • 4.18.0-193.14.3.el8_2
  • 4.18.0-193.6.3.el8_2
  • 4.18.0-305.3.1.el8_4
  • 4.18.0-193.19.1.el8_2
  • 4.18.0-304.el8
  • 4.18.0-240.1.1.el8_3
  • 4.18.0-305.12.1.el8_4
  • 4.18.0-240.15.1.el8_3
  • 4.18.0-240.10.1.el8_3
  • 4.18.0-305.el8
  • 4.18.0-240.22.1.el8_3
  • 4.18.0-240.el8
  • 4.18.0-305.25.1.el8_4
Rocky Linux 8 Released
7 kernels
  • 4.18.0-305.3.1.el8_4
  • 4.18.0-305.19.1.el8_4
  • 4.18.0-305.10.2.el8_4
  • 4.18.0-305.7.1.el8_4
  • 4.18.0-305.17.1.el8_4
  • 4.18.0-305.25.1.el8_4
  • 4.18.0-305.12.1.el8_4
Ubuntu 18.04 AWS Focal Released
12 kernels
  • 5.4.0-1035.37~18.04.1
  • 5.4.0-1025.25~18.04.1
  • 5.4.0-1030.31~18.04.1
  • 5.4.0-1028.29~18.04.1
  • 5.4.0-1034.35~18.04.1
  • 5.4.0-1026.26~18.04.1
  • 5.4.0-1031.32~18.04.1
  • 5.4.0-1032.33~18.04.1
  • 5.4.0-1033.34~18.04.1
  • 5.4.0-1029.30~18.04.1
  • 5.4.0-1037.39~18.04.1
  • 5.4.0-1038.40~18.04.1
Ubuntu 18.04 Azure Focal Released
14 kernels
  • 5.4.0-1034.35~18.04.1
  • 5.4.0-1035.36~18.04.1
  • 5.4.0-1031.32~18.04.1
  • 5.4.0-1023.23~18.04.1
  • 5.4.0-1022.22~18.04.1
  • 5.4.0-1026.26~18.04.1
  • 5.4.0-1040.42~18.04.1
  • 5.4.0-1020.20~18.04.1
  • 5.4.0-1029.29~18.04.1
  • 5.4.0-1033.34~18.04.1
  • 5.4.0-1032.33~18.04.1
  • 5.4.0-1025.25~18.04.1
  • 5.4.0-1036.38~18.04.1
  • 5.4.0-1039.41~18.04.1
Ubuntu 18.04 HWE Focal Released
21 kernels
  • 5.4.0-52.57~18.04.1
  • 5.4.0-60.67~18.04.1
  • 5.4.0-45.49~18.04.2
  • 5.4.0-56.62~18.04.1
  • 5.4.0-66.74~18.04.2
  • 5.4.0-62.70~18.04.1
  • 5.4.0-48.52~18.04.1
  • 5.4.0-59.65~18.04.1
  • 5.4.0-46.50~18.04.1
  • 5.4.0-49.53~18.04.1
  • 5.4.0-54.60~18.04.1
  • 5.4.0-55.61~18.04.1
  • 5.4.0-58.64~18.04.1
  • 5.4.0-64.72~18.04.1
  • 5.4.0-65.73~18.04.1
  • 5.4.0-44.48~18.04.1
  • 5.4.0-57.63~18.04.1
  • 5.4.0-63.71~18.04.1
  • 5.4.0-51.56~18.04.1
  • 5.4.0-53.59~18.04.1
  • 5.4.0-47.51~18.04.1
Ubuntu 18.04 HWE GCP Released
12 kernels
  • 5.4.0-1021.21~18.04.1
  • 5.4.0-1022.22~18.04.1
  • 5.4.0-1024.24~18.04.1
  • 5.4.0-1025.25~18.04.1
  • 5.4.0-1028.29~18.04.1
  • 5.4.0-1029.31~18.04.1
  • 5.4.0-1030.32~18.04.1
  • 5.4.0-1032.34~18.04.1
  • 5.4.0-1033.35~18.04.1
  • 5.4.0-1034.37~18.04.1
  • 5.4.0-1036.39~18.04.1
  • 5.4.0-1037.40~18.04.1
Ubuntu 20.04 Released
36 kernels
  • 5.4.0-39.43
  • 5.4.0-52.57
  • 5.4.0-42.46
  • 5.4.0-45.49
  • 5.4.0-66.74
  • 5.4.0-56.62
  • 5.4.0-34.38
  • 5.4.0-28.32
  • 5.4.0-53.59
  • 5.4.0-40.44
  • 5.4.0-49.53
  • 5.4.0-31.35
  • 5.4.0-26.30
  • 5.4.0-29.33
  • 5.4.0-30.34
  • 5.4.0-33.37
  • 5.4.0-38.42
  • 5.4.0-44.48
  • 5.4.0-46.50
  • 5.4.0-54.60
  • 5.4.0-55.61
  • 5.4.0-57.63
  • 5.4.0-58.64
  • 5.4.0-61.69
  • 5.4.0-63.71
  • 5.4.0-64.72
  • 5.4.0-65.73
  • 5.4.0-32.36
  • 5.4.0-43.47
  • 5.4.0-37.41
  • 5.4.0-51.56
  • 5.4.0-62.70
  • 5.4.0-48.52
  • 5.4.0-47.51
  • 5.4.0-59.65
  • 5.4.0-60.67
Ubuntu 20.04 AWS Released
24 kernels
  • 5.4.0-1032.33
  • 5.4.0-1033.34
  • 5.4.0-1015.15
  • 5.4.0-1024.24
  • 5.4.0-1025.25
  • 5.4.0-1017.17
  • 5.4.0-1035.37
  • 5.4.0-1018.18
  • 5.4.0-1037.39
  • 5.4.0-1038.40
  • 5.4.0-1020.20
  • 5.4.0-1011.11
  • 5.4.0-1022.22
  • 5.4.0-1028.29
  • 5.4.0-1030.31
  • 5.4.0-1016.16
  • 5.4.0-1019.19
  • 5.4.0-1021.21
  • 5.4.0-1023.23
  • 5.4.0-1026.26
  • 5.4.0-1029.30
  • 5.4.0-1031.32
  • 5.4.0-1036.38
  • 5.4.0-1034.35
Ubuntu 20.04 Azure Released
18 kernels
  • 5.4.0-1029.29
  • 5.4.0-1038.40
  • 5.4.0-1039.41
  • 5.4.0-1020.20
  • 5.4.0-1026.26
  • 5.4.0-1036.38
  • 5.4.0-1034.35
  • 5.4.0-1031.32
  • 5.4.0-1022.22
  • 5.4.0-1023.23
  • 5.4.0-1035.36
  • 5.4.0-1024.24
  • 5.4.0-1027.27
  • 5.4.0-1033.34
  • 5.4.0-1037.39
  • 5.4.0-1040.42
  • 5.4.0-1032.33
  • 5.4.0-1025.25
Ubuntu 20.04 HWE Released
10 kernels
  • 5.8.0-44.50~20.04.1
  • 5.8.0-43.49~20.04.1
  • 5.8.0-38.43~20.04.1
  • 5.8.0-34.37~20.04.2
  • 5.8.0-29.31~20.04.1
  • 5.8.0-33.36~20.04.1
  • 5.8.0-36.40~20.04.1
  • 5.8.0-40.45~20.04.1
  • 5.8.0-41.46~20.04.1
  • 5.8.0-45.51~20.04.1