Skip to content
OpenAdvisories
High USN-4313-1 1 CVE

linux, linux-aws, linux-azure, linux-azure-5.3, linux-gcp, linux-gcp-5.3, linux-gke-5.3, linux-hwe, linux-kvm, linux-oracle, linux-oracle-5.3, linux-raspi2, linux-raspi2-5.3 vulnerability

Published Mar 30, 2020 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

Manfred Paul discovered that the bpf verifier in the Linux kernel did not
properly calculate register bounds for certain operations. A local attacker
could use this to expose sensitive information (kernel memory) or gain
administrative privileges.

Fixed packages 6

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS linux-azure-5.3 5.3.0-1018.19~18.04.1
Ubuntu · 18.04 LTS 18.04:LTS linux-gcp-5.3 5.3.0-1016.17~18.04.1
Ubuntu · 18.04 LTS 18.04:LTS linux-gke-5.3 5.3.0-1016.17~18.04.1
Ubuntu · 18.04 LTS 18.04:LTS linux-hwe 5.3.0-45.37~18.04.1
Ubuntu · 18.04 LTS 18.04:LTS linux-oracle-5.3 5.3.0-1013.14~18.04.1
Ubuntu · 18.04 LTS 18.04:LTS linux-raspi2-5.3 5.3.0-1021.23~18.04.1

Vulnerabilities 1

  • High 7.8
    CVE-2020-8835 Public exploit

    Linux kernel bpf verifier vulnerability

    In the Linux kernel 5.5.0 and newer, the bpf verifier (kernel/bpf/verifier.c) did not properly restrict the register bounds for 32-bit operations, leading to out-of-bounds reads and writes in kernel memory. The vulnerability also affects the Linux 5.4 stable …

    Linux kernel Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2020-8835