Description
In kernel/bpf/hashtab.c in the Linux kernel through 5.13.8, there is an integer overflow and out-of-bounds write when many elements are placed in a single bucket. NOTE: exploitation might be impractical without the CAP_SYS_ADMIN capability.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 5.14.6-1 | — |
| Debian 13 | linux | 5.14.6-1 | — |
| Debian 12 | linux | 5.14.6-1 | — |
| Debian 11 | linux | 5.10.46-5 | DSA-4978-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | linux-aws-5.11 | 5.11.0-1020.21~20.04.2 | USN-5113-1 |
| Ubuntu 20.04 LTS | linux-azure-5.11 +1 | 5.11.0-1020.21~20.04.1 | USN-5113-1 |
| Ubuntu 20.04 LTS | linux-gcp-5.11 | 5.11.0-1021.23~20.04.1 | USN-5113-1 |
| Ubuntu 20.04 LTS | linux-hwe-5.11 | 5.11.0-38.42~20.04.1 | USN-5113-1 |
| Ubuntu 20.04 LTS | linux-oem-5.10 | 5.10.0-1050.52 | USN-5115-1 |
| Ubuntu 20.04 LTS | linux-oem-5.13 | 5.13.0-1014.18 | USN-5096-1 |
| Ubuntu 20.04 LTS | linux-riscv +8 | No fix yet | — |
| Ubuntu 20.04 LTS | linux-riscv-5.11 | 5.11.0-1021.22~20.04.1 | — |
| Ubuntu 18.04 LTS | linux-gcp +13 | No fix yet | — |
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP3 | kernel-64kb +7 | 5.3.18-59.24.1 | SUSE-SU-2021:3205-1 |
| SLES 15 SP3 | kernel-azure | 5.3.18-38.22.2 | SUSE-SU-2021:3179-1 |
| SLES 15 SP3 | kernel-default-base | 5.3.18-59.24.1.18.12.1 | SUSE-SU-2021:3205-1 |
| SLES 15 SP3 | kernel-syms-azure +1 | 5.3.18-38.22.1 | SUSE-SU-2021:3179-1 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLE Micro 5.1 | kernel-default | 5.3.18-59.24.1 | SUSE-SU-2021:3205-2 |
| SLE Micro 5.1 | kernel-default-base | 5.3.18-59.24.1.18.12.1 | SUSE-SU-2021:3205-2 |
| SLE Live Patching 15 SP3 | kernel-default | 5.3.18-59.24.1 | SUSE-SU-2021:3205-1 |
| SLE Live Patching 15 SP3 | kernel-livepatch-SLE15-SP3_Update_6 | 1-7.5.1 | SUSE-SU-2021:3205-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | kernel-source | 5.14.6-1.4 | openSUSE-SU-2024:13704-1, openSUSE-SU-2024:10728-1 |
| openSUSE Leap 15.3 | dtb-aarch64 +11 | 5.3.18-59.24.1 | openSUSE-SU-2021:3205-1 |
| openSUSE Leap 15.3 | kernel-azure | 5.3.18-38.22.2 | openSUSE-SU-2021:3179-1 |
| openSUSE Leap 15.3 | kernel-default-base | 5.3.18-59.24.1.18.12.1 | openSUSE-SU-2021:3205-1 |
| openSUSE Leap 15.3 | kernel-syms-azure +1 | 5.3.18-38.22.1 | openSUSE-SU-2021:3179-1 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 2 (CBL-Mariner) | kernel | 5.10.78.1-1 | — |
Advisories 11
- USN-5115-1 linux-oem-5.10 vulnerabilities Ubuntu Security Notices (USN) · Sep 14, 2026
- USN-5113-1 linux, linux-aws, linux-aws-5.11, linux-azure, linux-azure-5.11, linux-gcp, linux-gcp-5.11, linux-hwe-5.11, linux-kvm, linux-oracle, linux-oracle-5.11, linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Sep 9, 2026
- USN-5096-1 linux-oem-5.13 vulnerabilities Ubuntu Security Notices (USN) · Sep 9, 2026
- DSA-4978-1 linux - security update Debian Security (DSA / DLA) · Mar 9, 2026
- SUSE-SU-2021:3179-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2021:3179-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2021:3205-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:13704-1 kernel-devel-longterm-6.6.17-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2021:3205-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10728-1 kernel-devel-5.14.6-1.4 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2021:3205-2 Security update for the Linux Kernel SUSE / openSUSE Security Updates · May 2, 2025
References
- https://lore.kernel.org/bpf/20210806150419.109658-1-th.yasumatsu%40gmail.com/
- https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf.git/commit/?id=c4eb1f403243fc7bbb7de644db8587c03de36da6
- FEDORA-2021-b22606e88b vendor-advisory
- FEDORA-2021-f35f45a76f vendor-advisory
- https://security.netapp.com/advisory/ntap-20210909-0001/
- DSA-4978 vendor-advisory