CVEvulnerability
CVE-2021-31829
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2021-05-06
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-863
Description
kernel/bpf/verifier.c in the Linux kernel through 5.12.1 performs undesirable speculative loads, leading to disclosure of stack content via side-channel attacks, aka CID-801c6058d14a. The specific concern is not protecting the BPF stack area against speculative loads. Also, the BPF stack can contain uninitialized data that might represent sensitive information previously operated on by the kernel.
Affected configurations
• linux linux kernel (<= 5.12.1)
• fedoraproject fedora 32
• fedoraproject fedora 33
• fedoraproject fedora 34
• debian debian linux 9.0
Related
Weakness · CWE (1)
- CWE-863 Incorrect Authorization weakness
References
- http://www.openwall.com/lists/oss-security/2021/05/04/4 Mailing List, Patch, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2021/05/04/4 Mailing List, Patch, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2021/05/04/4 Mailing List, Patch, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2021/05/04/4 Mailing List, Patch, Third Party Advisory
- https://github.com/torvalds/linux/commit/801c6058d14a82179a7ee17a4b532cac6fad067f Patch, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html Mailing List, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VWCZ6LJLENL2C3URW5ICARTACXPFCFN2/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y4X2G5YAPYJGI3PFEZZNOTRYI33GOCCZ/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZI7OBCJQDNWMKLBP6MZ5NV4EUTDAMX6Q/ lists.fedoraproject.org
- http://www.openwall.com/lists/oss-security/2021/05/04/4 Mailing List, Patch, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2021/05/04/4 Mailing List, Patch, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2021/05/04/4 Mailing List, Patch, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2021/05/04/4 Mailing List, Patch, Third Party Advisory
- https://github.com/torvalds/linux/commit/801c6058d14a82179a7ee17a4b532cac6fad067f Patch, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html Mailing List, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VWCZ6LJLENL2C3URW5ICARTACXPFCFN2/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y4X2G5YAPYJGI3PFEZZNOTRYI33GOCCZ/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZI7OBCJQDNWMKLBP6MZ5NV4EUTDAMX6Q/ lists.fedoraproject.org