Overview
About vulnerability
In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because the protection mechanism neglects the possibility of uninitialized memory locations on the BPF stack.Details
- Affected product:
- AlmaLinux 8 , Amazon Linux 2 , Amazon Linux 2 ELS , CentOS 6 , CentOS 6 ELS , CentOS 6 plus , CentOS 7 , CentOS 7 ELS , CentOS 7 plus , CentOS 8 , CentOS 8.4 ELS , CentOS 8.5 ELS , CentOS Stream 8 ELS , CloudLinux 6 ELS , CloudLinux 7 ELS , CloudLinux OS 6 , CloudLinux OS 6h , CloudLinux OS 7 , CloudLinux OS 7h , CloudLinux OS 8 , Debian 10 , Debian 10 ELS , Debian 10 cloud , Debian 9 , Endurance 7 eig 3.10 , OpenVZ 6 , Oracle Linux 6 ELS , Oracle Linux 7 ELS , Proxmox VE 5 , Proxmox VE 6 , RHEL 6 , RHEL 7 , RHEL 7 ELS , RHEL 8 , Rocky Linux 8 , Scientific 6 , Ubuntu 14.04 , Ubuntu 14.04 ESM , Ubuntu 16.04 , Ubuntu 16.04 ELS , Ubuntu 16.04 ESM , Ubuntu 18.04 , Ubuntu 18.04 ELS , Ubuntu 20.04
- Affected packages:
- kernel @ - (+72 more)
Fixes
KernelCare state
Live-patch status from KernelCare for each operating system.
| Operating system | Status | Covered kernels |
|---|---|---|
| Amazon Linux 2 | Will Not Fix |
59 kernels
|
| Amazon Linux 2 5.10 | Will Not Fix | — |
| Debian 10 | Released |
19 kernels
|
| Debian 10 cloud | Released |
13 kernels
|
| Debian 9 backports | Released |
11 kernels
|
| Proxmox VE 6 | Released |
28 kernels
|
| Ubuntu 18.04 AWS Focal | Released |
25 kernels
|
| Ubuntu 18.04 Azure Focal | Released |
28 kernels
|
| Ubuntu 18.04 HWE Focal | Released |
34 kernels
|
| Ubuntu 18.04 HWE GCP | Released |
14 kernels
|
| Ubuntu 20.04 | Released |
49 kernels
|
| Ubuntu 20.04 AWS | Released |
37 kernels
|
| Ubuntu 20.04 AWS Hirsute | Released |
1 kernel
|
| Ubuntu 20.04 Azure | Released |
32 kernels
|
| Ubuntu 20.04 GCP | Released |
1 kernel
|
| Ubuntu 20.04 HWE Hirsute | Released |
4 kernels
|