Type Confusion in Linux kernel - CVE-2021-33624

Vulnerability identifier: #VU64881

CSH Severity: Low

CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-33624

CWE-ID: CWE-843

Exploitation vector: Local access

Exploit availability: Public exploit is available

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists due to a type confusion error within kernel/bpf/verifier.c in the Linux kernel. A an unprivileged BPF program can read arbitrary memory locations via a side-channel attack.

Linux kernel
Anolis OS
Ubuntu
openEuler
python2-perf
kernel-tools-debuginfo
python2-perf-debuginfo
perf-debuginfo
kernel-tools
kernel-debuginfo
kernel-tools-devel
kernel-source
bpftool-debuginfo
python3-perf
bpftool
python3-perf-debuginfo
kernel
kernel-devel
perf
kernel-debugsource
kernel-core
kernel-debug
kernel-debug-core
kernel-debug-devel
kernel-debug-modules
kernel-debug-modules-extra
kernel-headers
kernel-modules
kernel-modules-extra
kernel-modules-internal
kernel-tools-libs
kernel-tools-libs-devel
python-perf
linux-image-5.4.0-87-generic (Ubuntu package)
linux-image-5.4.0-87-generic-lpae (Ubuntu package)
linux-image-5.4.0-87-lowlatency (Ubuntu package)
linux-image-lowlatency-hwe-18.04 (Ubuntu package)
linux-image-virtual-hwe-18.04 (Ubuntu package)
linux-image-generic-lpae-hwe-18.04 (Ubuntu package)
linux-image-snapdragon-hwe-18.04 (Ubuntu package)
linux-image-generic-hwe-18.04 (Ubuntu package)
linux-image-oem (Ubuntu package)
linux-image-oem-osp1 (Ubuntu package)
linux-image-generic (Ubuntu package)
linux-image-virtual (Ubuntu package)
linux-image-generic-lpae (Ubuntu package)
linux-image-lowlatency (Ubuntu package)
linux-image-5.4.0-88-lowlatency (Ubuntu package)
linux-image-5.4.0-88-generic (Ubuntu package)
linux-image-5.4.0-88-generic-lpae (Ubuntu package)
linux-image-5.4.0-1024-gkeop (Ubuntu package)
linux-image-gkeop-5.4 (Ubuntu package)
linux-image-gkeop (Ubuntu package)
linux-image-raspi-hwe-18.04 (Ubuntu package)
linux-image-5.4.0-1044-raspi (Ubuntu package)
linux-image-raspi2 (Ubuntu package)
linux-image-raspi (Ubuntu package)
linux-image-kvm (Ubuntu package)
linux-image-5.4.0-1047-kvm (Ubuntu package)
linux-image-gcp (Ubuntu package)
linux-image-5.4.0-1053-gke (Ubuntu package)
linux-image-gke-5.4 (Ubuntu package)
linux-image-5.4.0-1053-gcp (Ubuntu package)
linux-image-gke (Ubuntu package)
linux-image-gcp-lts-20.04 (Ubuntu package)
linux-image-oracle-lts-20.04 (Ubuntu package)
linux-image-5.4.0-1055-oracle (Ubuntu package)
linux-image-oracle (Ubuntu package)
linux-image-aws (Ubuntu package)
linux-image-5.4.0-1057-aws (Ubuntu package)
linux-image-aws-lts-20.04 (Ubuntu package)
linux-image-azure (Ubuntu package)
linux-image-azure-lts-20.04 (Ubuntu package)
linux-image-5.4.0-1059-azure (Ubuntu package)
linux-image-5.4.0-1061-azure (Ubuntu package)
linux-image-oem-20.04 (Ubuntu package)
linux-image-generic-64k (Ubuntu package)
linux-image-5.11.0-37-generic-64k (Ubuntu package)
linux-image-5.11.0-37-lowlatency (Ubuntu package)
linux-image-5.11.0-37-generic (Ubuntu package)
linux-image-5.11.0-37-generic-lpae (Ubuntu package)
linux-image-generic-lpae-hwe-20.04 (Ubuntu package)
linux-image-generic-64k-hwe-20.04 (Ubuntu package)
linux-image-generic-hwe-20.04 (Ubuntu package)
linux-image-virtual-hwe-20.04 (Ubuntu package)
linux-image-lowlatency-hwe-20.04 (Ubuntu package)
linux-image-5.11.0-1017-kvm (Ubuntu package)
linux-image-5.11.0-1017-azure (Ubuntu package)
linux-image-azure-edge (Ubuntu package)
linux-image-raspi-nolpae (Ubuntu package)
linux-image-5.11.0-1019-raspi-nolpae (Ubuntu package)
linux-image-5.11.0-1019-raspi (Ubuntu package)
linux-image-5.11.0-1019-oracle (Ubuntu package)
linux-image-5.11.0-1019-azure (Ubuntu package)
linux-image-5.11.0-1019-aws (Ubuntu package)
linux-image-5.11.0-1020-gcp (Ubuntu package)
Pixel

Install updates from vendor's website.

Linux kernel - update to 5.12.13
python2-perf - update to 4.19.90-2107.4.0.0097
kernel-tools-debuginfo - update to 4.19.90-2107.4.0.0097
python2-perf-debuginfo - update to 4.19.90-2107.4.0.0097
perf-debuginfo - update to 4.19.90-2107.4.0.0097
kernel-tools - update to 4.19.90-2107.4.0.0097
kernel-debuginfo - update to 4.19.90-2107.4.0.0097
kernel-tools-devel - update to 4.19.90-2107.4.0.0097
kernel-source - update to 4.19.90-2107.4.0.0097
bpftool-debuginfo - update to 4.19.90-2107.4.0.0097
python3-perf - update to 4.19.90-2107.4.0.0097
bpftool - update to 4.19.90-2107.4.0.0097
python3-perf-debuginfo - update to 4.19.90-2107.4.0.0097
kernel - update to 4.19.90-2107.4.0.0097
kernel-devel - update to 4.19.90-2107.4.0.0097
perf - update to 4.19.90-2107.4.0.0097
kernel-debugsource - update to 4.19.90-2107.4.0.0097
python3-perf - update to 4.19.91-25.6
bpftool - addressed in versions 4.19.91-25.6, 4.19.91-26
kernel - addressed in versions 4.19.91-25.6, 4.19.91-26
kernel-core - update to 4.19.91-25.6
kernel-debug - addressed in versions 4.19.91-25.6, 4.19.91-26
kernel-debug-core - update to 4.19.91-25.6
kernel-debug-devel - addressed in versions 4.19.91-25.6, 4.19.91-26
kernel-debug-modules - update to 4.19.91-25.6
kernel-debug-modules-extra - update to 4.19.91-25.6
kernel-devel - addressed in versions 4.19.91-25.6, 4.19.91-26
kernel-headers - addressed in versions 4.19.91-25.6, 4.19.91-26
kernel-modules - update to 4.19.91-25.6
kernel-modules-extra - update to 4.19.91-25.6
kernel-modules-internal - update to 4.19.91-25.6
kernel-tools - addressed in versions 4.19.91-25.6, 4.19.91-26
kernel-tools-libs - addressed in versions 4.19.91-25.6, 4.19.91-26
kernel-tools-libs-devel - addressed in versions 4.19.91-25.6, 4.19.91-26
perf - addressed in versions 4.19.91-25.6, 4.19.91-26
python-perf - update to 4.19.91-26
linux-image-5.4.0-87-generic (Ubuntu package) - update to 5.4.0-87.98~18.04.1
linux-image-5.4.0-87-generic-lpae (Ubuntu package) - update to 5.4.0-87.98~18.04.1
linux-image-5.4.0-87-lowlatency (Ubuntu package) - update to 5.4.0-87.98~18.04.1
linux-image-lowlatency-hwe-18.04 (Ubuntu package) - update to 5.4.0.87.98~18.04.78
linux-image-virtual-hwe-18.04 (Ubuntu package) - update to 5.4.0.87.98~18.04.78
linux-image-generic-lpae-hwe-18.04 (Ubuntu package) - update to 5.4.0.87.98~18.04.78
linux-image-snapdragon-hwe-18.04 (Ubuntu package) - update to 5.4.0.87.98~18.04.78
linux-image-generic-hwe-18.04 (Ubuntu package) - update to 5.4.0.87.98~18.04.78
linux-image-oem (Ubuntu package) - addressed in versions 5.4.0.87.98~18.04.78, 5.4.0.88.92
linux-image-oem-osp1 (Ubuntu package) - addressed in versions 5.4.0.87.98~18.04.78, 5.4.0.88.92
linux-image-generic (Ubuntu package) - addressed in versions 5.4.0.88.92, 5.11.0.37.39
linux-image-virtual (Ubuntu package) - addressed in versions 5.4.0.88.92, 5.11.0.37.39
linux-image-generic-lpae (Ubuntu package) - addressed in versions 5.4.0.88.92, 5.11.0.37.39
linux-image-lowlatency (Ubuntu package) - addressed in versions 5.4.0.88.92, 5.11.0.37.39
linux-image-5.4.0-88-lowlatency (Ubuntu package) - update to 5.4.0-88.99
linux-image-5.4.0-88-generic (Ubuntu package) - update to 5.4.0-88.99
linux-image-5.4.0-88-generic-lpae (Ubuntu package) - update to 5.4.0-88.99
linux-image-5.4.0-1024-gkeop (Ubuntu package) - addressed in versions 5.4.0-1024.25, 5.4.0-1024.25~18.04.1
linux-image-gkeop-5.4 (Ubuntu package) - addressed in versions 5.4.0.1024.25~18.04.25, 5.4.0.1024.27
linux-image-gkeop (Ubuntu package) - update to 5.4.0.1024.27
linux-image-raspi-hwe-18.04 (Ubuntu package) - update to 5.4.0.1044.47
linux-image-5.4.0-1044-raspi (Ubuntu package) - addressed in versions 5.4.0-1044.48, 5.4.0-1044.48~18.04.1
linux-image-raspi2 (Ubuntu package) - update to 5.4.0.1044.79
linux-image-raspi (Ubuntu package) - addressed in versions 5.4.0.1044.79, 5.11.0.1019.17
linux-image-kvm (Ubuntu package) - addressed in versions 5.4.0.1047.46, 5.11.0.1017.18
linux-image-5.4.0-1047-kvm (Ubuntu package) - update to 5.4.0-1047.49
linux-image-gcp (Ubuntu package) - addressed in versions 5.4.0.1053.39, 5.11.0.1020.20
linux-image-5.4.0-1053-gke (Ubuntu package) - addressed in versions 5.4.0-1053.56, 5.4.0-1053.56~18.04.1
linux-image-gke-5.4 (Ubuntu package) - addressed in versions 5.4.0.1053.56~18.04.18, 5.4.0.1053.63
linux-image-5.4.0-1053-gcp (Ubuntu package) - addressed in versions 5.4.0-1053.57, 5.4.0-1053.57~18.04.1
linux-image-gke (Ubuntu package) - addressed in versions 5.4.0.1053.63, 5.11.0.1020.20
linux-image-gcp-lts-20.04 (Ubuntu package) - update to 5.4.0.1053.63
linux-image-oracle-lts-20.04 (Ubuntu package) - update to 5.4.0.1055.55
linux-image-5.4.0-1055-oracle (Ubuntu package) - addressed in versions 5.4.0-1055.59, 5.4.0-1055.59~18.04.1
linux-image-oracle (Ubuntu package) - addressed in versions 5.4.0.1055.59~18.04.35, 5.11.0.1019.20~20.04.12
linux-image-aws (Ubuntu package) - addressed in versions 5.4.0.1057.40, 5.11.0.1019.20~20.04.18
linux-image-5.4.0-1057-aws (Ubuntu package) - addressed in versions 5.4.0-1057.60, 5.4.0-1057.60~18.04.1
linux-image-aws-lts-20.04 (Ubuntu package) - update to 5.4.0.1057.60
linux-image-azure (Ubuntu package) - addressed in versions 5.4.0.1059.39, 5.4.0.1061.41, 5.11.0.1017.18, 5.11.0.1019.20
linux-image-azure-lts-20.04 (Ubuntu package) - addressed in versions 5.4.0.1059.57, 5.4.0.1061.59
linux-image-5.4.0-1059-azure (Ubuntu package) - addressed in versions 5.4.0-1059.62, 5.4.0-1059.62~18.04.1
linux-image-5.4.0-1061-azure (Ubuntu package) - addressed in versions 5.4.0-1061.64, 5.4.0-1061.64~18.04.1
linux-image-oem-20.04 (Ubuntu package) - update to 5.11.0.37.39
linux-image-generic-64k (Ubuntu package) - update to 5.11.0.37.39
linux-image-5.11.0-37-generic-64k (Ubuntu package) - update to 5.11.0-37.41~20.04.2
linux-image-5.11.0-37-lowlatency (Ubuntu package) - update to 5.11.0-37.41~20.04.2
linux-image-5.11.0-37-generic (Ubuntu package) - update to 5.11.0-37.41~20.04.2
linux-image-5.11.0-37-generic-lpae (Ubuntu package) - update to 5.11.0-37.41~20.04.2
linux-image-generic-lpae-hwe-20.04 (Ubuntu package) - update to 5.11.0.37.41~20.04.16
linux-image-generic-64k-hwe-20.04 (Ubuntu package) - update to 5.11.0.37.41~20.04.16
linux-image-generic-hwe-20.04 (Ubuntu package) - update to 5.11.0.37.41~20.04.16
linux-image-virtual-hwe-20.04 (Ubuntu package) - update to 5.11.0.37.41~20.04.16
linux-image-lowlatency-hwe-20.04 (Ubuntu package) - update to 5.11.0.37.41~20.04.16
linux-image-5.11.0-1017-kvm (Ubuntu package) - update to 5.11.0-1017.18
linux-image-5.11.0-1017-azure (Ubuntu package) - update to 5.11.0-1017.18~20.04.1
linux-image-azure-edge (Ubuntu package) - addressed in versions 5.11.0.1017.18~20.04.16, 5.11.0.1019.20~20.04.18
linux-image-raspi-nolpae (Ubuntu package) - update to 5.11.0.1019.17
linux-image-5.11.0-1019-raspi-nolpae (Ubuntu package) - update to 5.11.0-1019.20
linux-image-5.11.0-1019-raspi (Ubuntu package) - update to 5.11.0-1019.20
linux-image-5.11.0-1019-oracle (Ubuntu package) - update to 5.11.0-1019.20~20.04.1
linux-image-5.11.0-1019-azure (Ubuntu package) - update to 5.11.0-1019.20~20.04.1
linux-image-5.11.0-1019-aws (Ubuntu package) - update to 5.11.0-1019.20~20.04.1
linux-image-5.11.0-1020-gcp (Ubuntu package) - update to 5.11.0-1020.22
Pixel - update to 2022-03-05

• Exploit #8596 - CVE-2021-33624 (Proof of Concept for CVE-2021-33624) (November 10, 2022)

• https://source.android.com/security/bulletin/pixel/2022-03-01
• https://android.googlesource.com/kernel/common/+/5fc6ed1831ca5

• Multiple vulnerabilities in Google Pixel
• Ubuntu update for linux
• Ubuntu update for linux
• Ubuntu update for linux-azure
• Ubuntu update for linux-raspi
• Ubuntu update for linux-azure
• Ubuntu update for linux-azure
• openEuler update for kernel
• Anolis OS update for kernel(ANCK)4.19
• Anolis OS update for kernel