Summary
Johan Almbladh discovered that the eBPF JIT implementation for IBM
s390x systems in the Linux kernel miscompiled operations in some
situations, allowing circumvention of the BPF verifier. A local
attacker could use this to cause a denial of service (system crash)
or possibly execute arbitrary code.
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | linux | 4.15.0-158.166 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-hwe-5.4 | 5.4.0-86.97~18.04.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux | 5.4.0-86.97 |
| Ubuntu · 20.04 LTS 20.04:LTS | linux-hwe-5.11 | 5.11.0-36.40~20.04.1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | linux | 4.4.0-216.249 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | linux-hwe | 4.15.0-158.166~16.04.1 |
References
-
report
https://launchpad.net/bugs/1943960