Description
The check_alu_op() function in kernel/bpf/verifier.c in the Linux kernel through v5.16-rc5 did not properly update bounds while handling the mov32 instruction, which allows local users to obtain potentially sensitive address information, aka a "pointer leak."
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 5.15.15-1 | — |
| Debian 13 | linux | 5.15.15-1 | — |
| Debian 12 | linux | 5.15.15-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | linux-aws-5.13 | 5.13.0-1019.21~20.04.1 | USN-5337-1 |
| Ubuntu 20.04 LTS | linux-azure-5.13 | 5.13.0-1021.24~20.04.1 | USN-5368-1 |
| Ubuntu 20.04 LTS | linux-gcp-5.13 | 5.13.0-1021.25~20.04.1 | USN-5337-1 |
| Ubuntu 20.04 LTS | linux-hwe-5.13 | 5.13.0-37.42~20.04.1 | USN-5337-1 |
| Ubuntu 20.04 LTS | linux-oem-5.14 | 5.14.0-1022.24 | — |
| Ubuntu 20.04 LTS | linux-oracle-5.13 | 5.13.0-1025.30~20.04.1 | USN-5368-1 |
| Ubuntu 20.04 LTS | linux-riscv +17 | No fix yet | — |
| Ubuntu 18.04 LTS | linux-gcp +12 | No fix yet | — |
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP4 | kernel-64kb +6 | 5.14.21-150400.24.11.1 | SUSE-SU-2022:2520-1 |
| SLES 15 SP4 | kernel-azure +2 | 5.14.21-150400.14.7.1 | SUSE-SU-2022:2615-1 |
| SLES 15 SP4 | kernel-default-base | 5.14.21-150400.24.11.1.150400.24.3.6 | SUSE-SU-2022:2520-1 |
| SLES 15 SP3 | kernel-64kb +7 | 5.3.18-150300.59.60.4 | SUSE-SU-2022:1039-1 |
| SLES 15 SP3 | kernel-azure +2 | 5.3.18-150300.38.53.1 | SUSE-SU-2022:1163-1 |
| SLES 15 SP3 | kernel-default-base | 5.3.18-150300.59.60.4.150300.18.37.5 | SUSE-SU-2022:1039-1 |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLE Micro 5.1 | kernel-default | 5.3.18-150300.59.60.4 | SUSE-SU-2022:1039-1 |
| SLE Micro 5.1 | kernel-default-base | 5.3.18-150300.59.60.4.150300.18.37.5 | SUSE-SU-2022:1039-1 |
| SLE Micro 5.1 | kernel-rt | 5.3.18-150300.82.1 | SUSE-SU-2022:1038-1 |
| SLE Live Patching 15 SP4 | kernel-default | 5.14.21-150400.24.11.1 | SUSE-SU-2022:2520-1 |
| SLE Live Patching 15 SP4 | kernel-livepatch-SLE15-SP4_Update_1 | 1-150400.9.5.3 | SUSE-SU-2022:2520-1 |
| SLE Live Patching 15 SP3 | kernel-default | 5.3.18-150300.59.60.4 | SUSE-SU-2022:1039-1 |
| SLE Live Patching 15 SP3 | kernel-livepatch-SLE15-SP3_Update_16 | 1-150300.7.5.3 | SUSE-SU-2022:1039-1 |
| SUSE Real Time Module 15 SP3 | kernel-rt +3 | 5.3.18-150300.82.1 | SUSE-SU-2022:1038-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 15.4 | dtb-aarch64 +10 | 5.14.21-150400.24.11.1 | SUSE-SU-2022:2520-1 |
| openSUSE Leap 15.4 | kernel-azure +2 | 5.14.21-150400.14.7.1 | SUSE-SU-2022:2615-1 |
| openSUSE Leap 15.4 | kernel-default-base | 5.14.21-150400.24.11.1.150400.24.3.6 | SUSE-SU-2022:2520-1 |
| openSUSE Leap 15.3 | dtb-aarch64 +11 | 5.3.18-150300.59.60.4 | openSUSE-SU-2022:1039-1 |
| openSUSE Leap 15.3 | kernel-azure +2 | 5.3.18-150300.38.53.1 | SUSE-SU-2022:1163-1 |
| openSUSE Leap 15.3 | kernel-default-base | 5.3.18-150300.59.60.4.150300.18.37.5 | openSUSE-SU-2022:1039-1 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 2 (CBL-Mariner) | kernel | 5.15.26.1-1 | — |
Advisories 8
- USN-5368-1 linux-azure-5.13, linux-oracle-5.13 vulnerabilities Ubuntu Security Notices (USN) · Sep 14, 2026
- USN-5337-1 linux, linux-aws, linux-aws-5.13, linux-gcp, linux-gcp-5.13, linux-hwe-5.13, linux-kvm, linux-oracle, linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Sep 14, 2026
- SUSE-SU-2022:2520-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:2615-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:1163-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:1038-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2022:1039-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:1039-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
References
- https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=3cf2b61eb06765e27fec6799292d9fb46d0b7e60
- https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=e572ff80f05c33cd0cb4860f864f5c9c044280b6
- https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=b1a7288dedc6caf9023f2676b4f5ed34cf0d4029