SB2022100502 - Information disclosure in Linux kernel eBPF
Published: October 5, 2022
Security Bulletin ID
SB2022100502
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Information disclosure
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Memory leak (CVE-ID: CVE-2021-4159)
The vulnerability allows a local user to gain access to sensitive information.
The vulnerability exists due memory leak in Linux kernel EBPF verifier when handling internal data structures. A local user with permissions to insert eBPF code to the kernel can force the kernel to leak internal kernel memory details and bypass mitigations, related to exploitation protection.
Remediation
Install update from vendor's website.
References
- https://access.redhat.com/security/cve/CVE-2021-4159
- https://bugzilla.redhat.com/show_bug.cgi?id=2036024
- https://security-tracker.debian.org/tracker/CVE-2021-4159
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=294f2fc6da27620a506e6c050241655459ccd6bd
- https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html