CVE-2021-34556
⚪ Do wiadomości
Atak Speculative Store Bypass w jądrze Linux pozwala nieuprzywilejowanemu programowi BPF na dostęp do wrażliwych danych.
CVSS
5.5
EPSS
0.4%
Exploit
none
Vendor
fedoraproject
Opis źródłowy (NVD)
In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because the protection mechanism neglects the possibility of uninitialized memory locations on the BPF stack.
brak
Brak patcha
Źródła i daty
| Źródło | Wartość |
|---|---|
| NVD – CVSS | 5.5 |
| CISA KEV (aktywnie wykorzystywane) | Nie |
| FIRST EPSS (prawdopodobieństwo exploita) | 0.4% |
| Opublikowano (NVD) | 2021-08-02 05:15:07 UTC |
| Ostatnia modyfikacja (NVD) | 2026-10-08 21:17:35 UTC |
Referencje
- http://www.openwall.com/lists/oss-security/2021/08/01/3 ([email protected]) [Mailing List]
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/patch/?id=2039f26f3aca5b0e419b98f65dd36481337b86ee ([email protected]) [Patch, Vendor Advisory]
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/patch/?id=f5e81d1117501546b7be050c5fbafa6efd2c722c ([email protected]) [Patch, Vendor Advisory]
- https://lists.debian.org/debian-lts-announce/2021/10/msg00010.html ([email protected]) [Mailing List, Third Party Advisory]
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/565ZS55ZFEN62WVRRORT7R63RXW5F4T4/ ([email protected])
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6JKK6XNRZX5BT5QVYOKGVJ2BHFZAP5EX/ ([email protected])