In several functions of verifier.c, there is a possible way to disclose kernel memory due to side channel information disclosure. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-29155US | medium5.5 | Exploit | ||
An issue was discovered in the Linux kernel through 5.11.x. kernel/bpf/verifier.c performs undesirable out-of-bounds speculation on pointer arithmetic, leading to side-channel atta… | ||||
02
references
External citations — patches, advisories, analysis.
- https://android.googlesource.com/kernel/common/+/073815b756c51ba9d8384d924c5d1c03ca3d1ae4FIX
- https://android.googlesource.com/kernel/common/+/24c109bb1537c12c02aeed2d51a347b4d6a9b76eFIX
- https://android.googlesource.com/kernel/common/+/6f55b2f2a1178856c19bbce2f71449926e731914FIX
- https://android.googlesource.com/kernel/common/+/7fedb63a8307dda0ec3b8969a3b233a1dd7ea8e0FIX
- https://android.googlesource.com/kernel/common/+/9601148392520e2e134936e76788fc2a6371e7beFIX
- https://android.googlesource.com/kernel/common/+/a6aaece00a57fa6f22575364b3903dfbccf5345dFIX
- https://android.googlesource.com/kernel/common/+/b658bbb844e28f1862867f37e8ca11a8e2aa94a3FIX
- https://android.googlesource.com/kernel/common/+/f528819334881fd622fdadeddb3f7edaed8b7c9bFIX
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan