Summary
Piotr Krysiuk discovered that the BPF subsystem in the Linux kernel did not
properly compute a speculative execution limit on pointer arithmetic in
some situations. A local attacker could use this to expose sensitive
information (kernel memory). (CVE-2020-27171)
Piotr Krysiuk discovered that the BPF subsystem in the Linux kernel did not
properly apply speculative execution limits on some pointer types. A local
attacker could use this to expose sensitive information (kernel memory).
(CVE-2020-27170)
Fixed packages 15
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | linux-aws-hwe | 4.15.0-1097.104~16.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-azure | 4.15.0-1111.123~16.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-gcp | 4.15.0-1096.109~16.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-hwe | 4.15.0-140.144~16.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-oracle | 4.15.0-1068.76~16.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux | 4.15.0-140.144 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-aws | 4.15.0-1097.104 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-azure-4.15 | 4.15.0-1111.123 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-dell300x | 4.15.0-1015.19 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-gcp-4.15 | 4.15.0-1096.109 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-kvm | 4.15.0-1088.90 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-oracle | 4.15.0-1068.76 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-raspi2 | 4.15.0-1082.87 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-snapdragon | 4.15.0-1099.108 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | linux-azure | 4.15.0-1111.123~14.04.1 |
Vulnerabilities 2
-
Unscored —
An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c performs undesirable out-of-bounds spe…
-
Unscored —
An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c has an off-by-one error (with a result…