Поиск уязвимостей

kernel/bpf/verifier.c in the Linux kernel through 5.12.1 performs undesirable speculative loads, leading to disclosure of stack content via side-channel attacks, aka CID-801c6058d14a. The specific concern is not protecting the BPF stack area against speculative loads. Also, the BPF stack can contain uninitialized data that might represent sensitive information previously operated on by the kernel.

kernel/bpf/verifier.c in the Linux kernel through 5.12.1 performs undesirable speculative loads, leading to disclosure of stack content via side-channel attacks, aka CID-801c6058d14a. The specific concern is not protecting the BPF stack area against speculative loads. Also, the BPF stack can contain uninitialized data that might represent sensitive information previously operated on by the kernel.

kernel/bpf/verifier.c in the Linux kernel through 5.12.1 performs undesirable speculative loads, leading to disclosure of stack content via side-channel attacks, aka CID-801c6058d14a. The specific concern is not protecting the BPF stack area against speculative loads. Also, the BPF stack can contain uninitialized data that might represent sensitive information previously operated on by the kernel.

kernel/bpf/verifier.c in the Linux kernel through 5.12.1 performs undesirable speculative loads leading to disclosure of stack content via side-channel attacks aka CID-801c6058d14a. The specific concern is not protecting the BPF stack area against speculative loads. Also the BPF stack can contain uninitialized data that might represent sensitive information previously operated on by the kernel.

kernel/bpf/verifier.c in the Linux kernel through 5.12.1 performs unde ...

kernel/bpf/verifier.c in the Linux kernel through 5.12.1 performs undesirable speculative loads, leading to disclosure of stack content via side-channel attacks, aka CID-801c6058d14a. The specific concern is not protecting the BPF stack area against speculative loads. Also, the BPF stack can contain uninitialized data that might represent sensitive information previously operated on by the kernel.

Уязвимость подсистемы BPF ядра операционных систем Linux, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

ELSA-2021-9363: Unbreakable Enterprise kernel-container security update (IMPORTANT)

ELSA-2021-9362: Unbreakable Enterprise kernel security update (IMPORTANT)

ELSA-2021-4356: kernel security, bug fix, and enhancement update (MODERATE)

ALT-PU-2021-1833: package `kernel-image-mp` update to version 5.12.4-alt1

ALT-PU-2022-1240: package `kernel-image-std-def` update to version 5.15.22-alt1

ALT-PU-2021-1888: package `kernel-image-rpi-un` update to version 5.12.6-alt1

ALT-PU-2021-1990: package `kernel-image-un-def` update to version 5.12.10-alt1

ALT-PU-2022-1421: package `kernel-image-rpi-def` update to version 5.15.25-alt1

ALT-PU-2022-1419: package `kernel-image-rpi-def` update to version 5.15.25-alt1

ALT-PU-2023-1814: package `kernel-image-rt` update to version 6.1.28-alt1.rt10