|
Vulnerabilities
< Back

CVE-2021-33624

Updated on 23 Jun 2021

Severity

4.7 Medium severity

Details

CVSS score
4.7
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
CWE ID
Links
NISTCIRCLRHELUbuntu

Overview

About vulnerability

In kernel/bpf/verifier.c in the Linux kernel before 5.12.13, a branch can be mispredicted (e.g., because of type confusion) and consequently an unprivileged BPF program can read arbitrary memory locations via a side-channel attack, aka CID-9183671af6db.

Details

Affected product:
AlmaLinux 8 , Amazon Linux 2 , Amazon Linux 2 ELS , CentOS 6 , CentOS 6 ELS , CentOS 6 plus , CentOS 7 , CentOS 7 ELS , CentOS 7 plus , CentOS 8 , CentOS 8.4 ELS , CentOS 8.5 ELS , CentOS Stream 8 ELS , CloudLinux 6 ELS , CloudLinux 7 ELS , CloudLinux OS 6 , CloudLinux OS 6h , CloudLinux OS 7 , CloudLinux OS 7h , CloudLinux OS 8 , Debian 10 , Debian 10 ELS , Debian 10 cloud , Debian 9 , Endurance 7 eig 3.10 , OpenVZ 6 , Oracle Linux 6 ELS , Oracle Linux 7 ELS , Proxmox VE 5 , Proxmox VE 6 , RHEL 6 , RHEL 7 , RHEL 7 ELS , RHEL 8 , Rocky Linux 8 , Scientific 6 , Ubuntu 14.04 , Ubuntu 14.04 ESM , Ubuntu 16.04 , Ubuntu 16.04 ELS , Ubuntu 16.04 ESM , Ubuntu 18.04 , Ubuntu 18.04 ELS , Ubuntu 20.04 , Upstream 4.19
Affected packages:
kernel @ 3.10.0 (+73 more)

Fixes

KernelCare state

Live-patch status from KernelCare for each operating system.

Operating system Status Covered kernels
Amazon Linux 2 Will Not Fix
57 kernels
  • 4.14.158-129.185.amzn2
  • 4.14.101-91.76.amzn2
  • 4.14.104-95.84.amzn2
  • 4.14.106-97.85.amzn2
  • 4.14.109-99.92.amzn2
  • 4.14.114-103.97.amzn2
  • 4.14.114-105.126.amzn2
  • 4.14.121-109.96.amzn2
  • 4.14.123-111.109.amzn2
  • 4.14.128-112.105.amzn2
  • 4.14.133-113.105.amzn2
  • 4.14.133-113.112.amzn2
  • 4.14.143-118.123.amzn2
  • 4.14.146-119.123.amzn2
  • 4.14.146-120.181.amzn2
  • 4.14.152-124.171.amzn2
  • 4.14.152-127.182.amzn2
  • 4.14.154-128.181.amzn2
  • 4.14.165-131.185.amzn2
  • 4.14.165-133.209.amzn2
  • 4.14.171-136.231.amzn2
  • 4.14.173-137.228.amzn2
  • 4.14.173-137.229.amzn2
  • 4.14.177-139.253.amzn2
  • 4.14.177-139.254.amzn2
  • 4.14.181-140.257.amzn2
  • 4.14.181-142.260.amzn2
  • 4.14.186-146.268.amzn2
  • 4.14.192-147.314.amzn2
  • 4.14.193-149.317.amzn2
  • 4.14.198-152.320.amzn2
  • 4.14.200-155.322.amzn2
  • 4.14.203-156.332.amzn2
  • 4.14.209-160.335.amzn2
  • 4.14.209-160.339.amzn2
  • 4.14.214-160.339.amzn2
  • 4.14.219-161.340.amzn2
  • 4.14.219-164.354.amzn2
  • 4.14.225-168.357.amzn2
  • 4.14.225-169.362.amzn2
  • 4.14.231-173.360.amzn2
  • 4.14.231-173.361.amzn2
  • 4.14.232-176.381.amzn2
  • 4.14.232-177.418.amzn2
  • 4.14.26-54.32.amzn2
  • 4.14.33-59.34.amzn2
  • 4.14.42-61.37.amzn2
  • 4.14.51-66.38.amzn2
  • 4.14.62-70.117.amzn2
  • 4.14.67-71.56.amzn2
  • 4.14.70-72.55.amzn2
  • 4.14.72-73.55.amzn2
  • 4.14.77-80.57.amzn2
  • 4.14.88-88.73.amzn2
  • 4.14.88-88.76.amzn2
  • 4.14.94-89.73.amzn2
  • 4.14.97-90.72.amzn2
Amazon Linux 2 5.10 Will Not Fix —
Amazon Linux 2 5.4 Released
4 kernels
  • 5.4.105-48.177.amzn2
  • 5.4.110-54.182.amzn2
  • 5.4.110-54.189.amzn2
  • 5.4.117-58.216.amzn2
CentOS 7 alt-5.4 Released
10 kernels
  • 5.4.105-200.el7
  • 5.4.115-200.el7
  • 5.4.121-200.el7
  • 5.4.125-200.el7
  • 5.4.129-200.el7
  • 5.4.134-200.el7
  • 5.4.72-200.el7
  • 5.4.84-200.el7
  • 5.4.88-200.el7
  • 5.4.96-200.el7
Debian 10 Released
19 kernels
  • 4.19.181-1
  • 4.19.152-1
  • 4.19.98-1
  • 4.19.132-1
  • 4.19.194-3
  • 4.19.67-2+deb10u1
  • 4.19.171-2
  • 4.19.98-1+deb10u1
  • 4.19.118-2
  • 4.19.160-2
  • 4.19.194-2
  • 4.19.37-5
  • 4.19.118-2+deb10u1
  • 4.19.37-5+deb10u2
  • 4.19.67-2+deb10u2
  • 4.19.67-2
  • 4.19.146-1
  • 4.19.194-1
  • 4.19.37-5+deb10u1
Debian 10 cloud Released
13 kernels
  • 4.19.67-2+deb10u2
  • 4.19.194-1
  • 4.19.171-2
  • 4.19.152-1
  • 4.19.118-2
  • 4.19.160-2
  • 4.19.194-2
  • 4.19.146-1
  • 4.19.181-1
  • 4.19.194-3
  • 4.19.98-1+deb10u1
  • 4.19.118-2+deb10u1
  • 4.19.132-1
Debian 9 backports Released
11 kernels
  • 4.19.194-3~deb9u1
  • 4.19.67-2+deb10u2~bpo9+1
  • 4.19.98-1~bpo9+1
  • 4.19.118-2+deb10u1~bpo9+1
  • 4.19.146-1~deb9u1
  • 4.19.171-2~deb9u1
  • 4.19.132-1~deb9u2
  • 4.19.152-1~deb9u1
  • 4.19.181-1~deb9u1
  • 4.19.194-1~deb9u1
  • 4.19.160-2~deb9u1
Proxmox VE 6 Released
26 kernels
  • 5.4.101-1-pve_5.4.101-1
  • 5.4.103-1-pve_5.4.103-1
  • 5.4.106-1-pve_5.4.106-1
  • 5.4.114-1-pve_5.4.114-1
  • 5.4.119-1-pve_5.4.119-1
  • 5.4.124-1-pve_5.4.124-1
  • 5.4.124-1-pve_5.4.124-2
  • 5.4.128-1-pve_5.4.128-1
  • 5.4.22-1-pve_5.4.22-1
  • 5.4.24-1-pve_5.4.24-1
  • 5.4.27-1-pve_5.4.27-1
  • 5.4.30-1-pve_5.4.30-1
  • 5.4.44-2-pve_5.4.44-2
  • 5.4.60-1-pve_5.4.60-2
  • 5.4.78-2-pve_5.4.78-2
  • 5.4.86-1-pve_5.4.86-1
  • 5.4.98-1-pve_5.4.98-1
  • 5.4.128-1-pve-5.4.128-2
  • 5.4.41-1-pve_5.4.41-1
  • 5.4.44-1-pve_5.4.44-1
  • 5.4.60-1-pve_5.4.60-1
  • 5.4.78-1-pve_5.4.78-1
  • 5.4.73-1-pve_5.4.73-1
  • 5.4.55-1-pve_5.4.55-1
  • 5.4.65-1-pve_5.4.65-1
  • 5.4.34-1-pve_5.4.34-2
Ubuntu 18.04 AWS Focal Released
23 kernels
  • 5.4.0-1026.26~18.04.1
  • 5.4.0-1029.30~18.04.1
  • 5.4.0-1031.32~18.04.1
  • 5.4.0-1032.33~18.04.1
  • 5.4.0-1033.34~18.04.1
  • 5.4.0-1047.49~18.04.1
  • 5.4.0-1051.53~18.04.1
  • 5.4.0-1054.57~18.04.1
  • 5.4.0-1048.50~18.04.1
  • 5.4.0-1035.37~18.04.1
  • 5.4.0-1025.25~18.04.1
  • 5.4.0-1049.51~18.04.1
  • 5.4.0-1043.45~18.04.1
  • 5.4.0-1055.58~18.04.1
  • 5.4.0-1030.31~18.04.1
  • 5.4.0-1028.29~18.04.1
  • 5.4.0-1034.35~18.04.1
  • 5.4.0-1056.59~18.04.1
  • 5.4.0-1037.39~18.04.1
  • 5.4.0-1041.43~18.04.1
  • 5.4.0-1038.40~18.04.1
  • 5.4.0-1045.47~18.04.1
  • 5.4.0-1039.41~18.04.1
Ubuntu 18.04 Azure Focal Released
25 kernels
  • 5.4.0-1020.20~18.04.1
  • 5.4.0-1029.29~18.04.1
  • 5.4.0-1033.34~18.04.1
  • 5.4.0-1034.35~18.04.1
  • 5.4.0-1049.51~18.04.1
  • 5.4.0-1055.57~18.04.1
  • 5.4.0-1056.58~18.04.1
  • 5.4.0-1035.36~18.04.1
  • 5.4.0-1031.32~18.04.1
  • 5.4.0-1044.46~18.04.1
  • 5.4.0-1023.23~18.04.1
  • 5.4.0-1058.60~18.04.1
  • 5.4.0-1022.22~18.04.1
  • 5.4.0-1043.45~18.04.1
  • 5.4.0-1048.50~18.04.1
  • 5.4.0-1026.26~18.04.1
  • 5.4.0-1040.42~18.04.1
  • 5.4.0-1032.33~18.04.1
  • 5.4.0-1025.25~18.04.1
  • 5.4.0-1036.38~18.04.1
  • 5.4.0-1039.41~18.04.1
  • 5.4.0-1047.49~18.04.1
  • 5.4.0-1046.48~18.04.1
  • 5.4.0-1051.53~18.04.1
  • 5.4.0-1041.43~18.04.1
Ubuntu 18.04 HWE Focal Released
32 kernels
  • 5.4.0-46.50~18.04.1
  • 5.4.0-49.53~18.04.1
  • 5.4.0-54.60~18.04.1
  • 5.4.0-55.61~18.04.1
  • 5.4.0-44.48~18.04.1
  • 5.4.0-57.63~18.04.1
  • 5.4.0-58.64~18.04.1
  • 5.4.0-63.71~18.04.1
  • 5.4.0-64.72~18.04.1
  • 5.4.0-65.73~18.04.1
  • 5.4.0-86.97~18.04.1
  • 5.4.0-67.75~18.04.1
  • 5.4.0-52.57~18.04.1
  • 5.4.0-71.79~18.04.1
  • 5.4.0-84.94~18.04.1
  • 5.4.0-60.67~18.04.1
  • 5.4.0-74.83~18.04.1
  • 5.4.0-80.90~18.04.1
  • 5.4.0-45.49~18.04.2
  • 5.4.0-56.62~18.04.1
  • 5.4.0-73.82~18.04.1
  • 5.4.0-72.80~18.04.1
  • 5.4.0-66.74~18.04.2
  • 5.4.0-62.70~18.04.1
  • 5.4.0-81.91~18.04.1
  • 5.4.0-48.52~18.04.1
  • 5.4.0-59.65~18.04.1
  • 5.4.0-70.78~18.04.1
  • 5.4.0-77.86~18.04.1
  • 5.4.0-51.56~18.04.1
  • 5.4.0-53.59~18.04.1
  • 5.4.0-47.51~18.04.1
Ubuntu 18.04 HWE GCP Released
14 kernels
  • 5.4.0-1021.21~18.04.1
  • 5.4.0-1022.22~18.04.1
  • 5.4.0-1024.24~18.04.1
  • 5.4.0-1025.25~18.04.1
  • 5.4.0-1028.29~18.04.1
  • 5.4.0-1029.31~18.04.1
  • 5.4.0-1030.32~18.04.1
  • 5.4.0-1032.34~18.04.1
  • 5.4.0-1033.35~18.04.1
  • 5.4.0-1034.37~18.04.1
  • 5.4.0-1036.39~18.04.1
  • 5.4.0-1037.40~18.04.1
  • 5.4.0-1038.41~18.04.1
  • 5.4.0-1040.43~18.04.1
Ubuntu 20.04 Released
47 kernels
  • 5.4.0-77.86
  • 5.4.0-71.79
  • 5.4.0-39.43
  • 5.4.0-67.75
  • 5.4.0-72.80
  • 5.4.0-74.83
  • 5.4.0-52.57
  • 5.4.0-45.49
  • 5.4.0-42.46
  • 5.4.0-66.74
  • 5.4.0-56.62
  • 5.4.0-84.94
  • 5.4.0-34.38
  • 5.4.0-28.32
  • 5.4.0-81.91
  • 5.4.0-53.59
  • 5.4.0-40.44
  • 5.4.0-49.53
  • 5.4.0-70.78
  • 5.4.0-31.35
  • 5.4.0-59.65
  • 5.4.0-60.67
  • 5.4.0-26.30
  • 5.4.0-29.33
  • 5.4.0-30.34
  • 5.4.0-32.36
  • 5.4.0-33.37
  • 5.4.0-38.42
  • 5.4.0-43.47
  • 5.4.0-44.48
  • 5.4.0-46.50
  • 5.4.0-54.60
  • 5.4.0-55.61
  • 5.4.0-57.63
  • 5.4.0-58.64
  • 5.4.0-61.69
  • 5.4.0-63.71
  • 5.4.0-64.72
  • 5.4.0-65.73
  • 5.4.0-86.97
  • 5.4.0-51.56
  • 5.4.0-37.41
  • 5.4.0-80.90
  • 5.4.0-62.70
  • 5.4.0-73.82
  • 5.4.0-48.52
  • 5.4.0-47.51
Ubuntu 20.04 AWS Released
35 kernels
  • 5.4.0-1016.16
  • 5.4.0-1019.19
  • 5.4.0-1021.21
  • 5.4.0-1023.23
  • 5.4.0-1026.26
  • 5.4.0-1029.30
  • 5.4.0-1031.32
  • 5.4.0-1032.33
  • 5.4.0-1033.34
  • 5.4.0-1036.38
  • 5.4.0-1047.49
  • 5.4.0-1015.15
  • 5.4.0-1056.59
  • 5.4.0-1024.24
  • 5.4.0-1051.53
  • 5.4.0-1025.25
  • 5.4.0-1017.17
  • 5.4.0-1041.43
  • 5.4.0-1035.37
  • 5.4.0-1048.50
  • 5.4.0-1018.18
  • 5.4.0-1037.39
  • 5.4.0-1039.41
  • 5.4.0-1038.40
  • 5.4.0-1020.20
  • 5.4.0-1022.22
  • 5.4.0-1028.29
  • 5.4.0-1011.11
  • 5.4.0-1030.31
  • 5.4.0-1055.58
  • 5.4.0-1034.35
  • 5.4.0-1049.51
  • 5.4.0-1043.45
  • 5.4.0-1045.47
  • 5.4.0-1054.57
Ubuntu 20.04 AWS Hirsute Ready For Release —
Ubuntu 20.04 Azure Released
29 kernels
  • 5.4.0-1058.60
  • 5.4.0-1048.50
  • 5.4.0-1039.41
  • 5.4.0-1044.46
  • 5.4.0-1020.20
  • 5.4.0-1026.26
  • 5.4.0-1047.49
  • 5.4.0-1046.48
  • 5.4.0-1036.38
  • 5.4.0-1051.53
  • 5.4.0-1056.58
  • 5.4.0-1034.35
  • 5.4.0-1031.32
  • 5.4.0-1022.22
  • 5.4.0-1023.23
  • 5.4.0-1035.36
  • 5.4.0-1024.24
  • 5.4.0-1027.27
  • 5.4.0-1029.29
  • 5.4.0-1033.34
  • 5.4.0-1037.39
  • 5.4.0-1038.40
  • 5.4.0-1049.51
  • 5.4.0-1040.42
  • 5.4.0-1032.33
  • 5.4.0-1025.25
  • 5.4.0-1041.43
  • 5.4.0-1043.45
  • 5.4.0-1055.57
Ubuntu 20.04 GCP Released
1 kernel
  • 5.4.0-1049.53
Ubuntu 20.04 HWE Hirsute Released
2 kernels
  • 5.11.0-25.27~20.04.1
  • 5.11.0-27.29~20.04.1