In several functions of verifier.c, there is a possible way to disclose kernel memory due to side channel information disclosure. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-29155US | medium5.5 | Exploit | ||
An issue was discovered in the Linux kernel through 5.11.x. kernel/bpf/verifier.c performs undesirable out-of-bounds speculation on pointer arithmetic, leading to side-channel atta… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://android.googlesource.com/kernel/common/+/073815b756c51ba9d8384d924c5d1c03ca3d1ae4FIX
- https://android.googlesource.com/kernel/common/+/24c109bb1537c12c02aeed2d51a347b4d6a9b76eFIX
- https://android.googlesource.com/kernel/common/+/6f55b2f2a1178856c19bbce2f71449926e731914FIX
- https://android.googlesource.com/kernel/common/+/7fedb63a8307dda0ec3b8969a3b233a1dd7ea8e0FIX
- https://android.googlesource.com/kernel/common/+/9601148392520e2e134936e76788fc2a6371e7beFIX
- https://android.googlesource.com/kernel/common/+/a6aaece00a57fa6f22575364b3903dfbccf5345dFIX
- https://android.googlesource.com/kernel/common/+/b658bbb844e28f1862867f37e8ca11a8e2aa94a3FIX
- https://android.googlesource.com/kernel/common/+/f528819334881fd622fdadeddb3f7edaed8b7c9bFIX
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan