PT-2021-2801 · Linux+8 · Linux Kernel+8
Benedict Schlueter
+1
·
Published
2021-04-17
·
Updated
2025-09-29
·
CVE-2021-29155
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions through 5.11.x
Description
An issue in the Linux kernel allows for undesirable out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks. This can defeat Spectre mitigations and obtain sensitive information from kernel memory. The issue is related to the
kernel/bpf/verifier.c component and involves the incorrect accounting of pointer modification during sequences of pointer arithmetic operations.Recommendations
For Linux kernel versions through 5.11.x, consider applying a patch or update that addresses the issue in
kernel/bpf/verifier.c to prevent out-of-bounds speculation on pointer arithmetic. As a temporary workaround, consider restricting access to sensitive kernel memory or disabling the verifier.c component until a patch is available.Exploit
Fix
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Centos
Linuxmint
Linux Kernel
Red Hat
Suse
Ubuntu