Information disclosure in Linux kernel - CVE-2021-31829

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU67181

Information disclosure in Linux kernel - CVE-2021-31829

Published: September 12, 2022


Vulnerability identifier: #VU67181
CSH Severity: Low
CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2021-31829
CWE-ID: CWE-200
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to gain access to potentially sensitive information.

The vulnerability exists due to excessive data output in the Linux kernel's eBPF verification code. A local user can insert eBPF instructions, use the eBPF verifier to abuse a spectre-like flaw and infer all system memory.


Affected software

Linux kernel
Amazon Linux AMI
ClevOS
Anolis OS
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for x86_64
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Real Time
Red Hat Enterprise Linux for Real Time for NFV
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for Power, little endian
Ubuntu
openEuler
Fedora
linux-image-aws-hwe (Ubuntu package)
kernel
linux-image-virtual (Ubuntu package)
linux-image-lowlatency (Ubuntu package)
linux-image-generic-lpae (Ubuntu package)
linux-image-generic (Ubuntu package)
linux-image-4.15.0-151-generic (Ubuntu package)
linux-image-4.15.0-151-generic-lpae (Ubuntu package)
linux-image-4.15.0-151-lowlatency (Ubuntu package)
linux-image-virtual-hwe-16.04 (Ubuntu package)
linux-image-lowlatency-hwe-16.04 (Ubuntu package)
linux-image-generic-hwe-16.04 (Ubuntu package)
linux-image-4.15.0-1078-oracle (Ubuntu package)
linux-image-oracle-lts-18.04 (Ubuntu package)
linux-image-raspi2 (Ubuntu package)
linux-image-4.15.0-1092-raspi2 (Ubuntu package)
linux-image-kvm (Ubuntu package)
linux-image-4.15.0-1097-kvm (Ubuntu package)
linux-image-4.15.0-1106-gcp (Ubuntu package)
linux-image-gcp-lts-18.04 (Ubuntu package)
linux-image-aws-lts-18.04 (Ubuntu package)
linux-image-snapdragon (Ubuntu package)
linux-image-4.15.0-1109-aws (Ubuntu package)
linux-image-4.15.0-1109-snapdragon (Ubuntu package)
linux-image-azure-lts-18.04 (Ubuntu package)
linux-image-4.15.0-1121-azure (Ubuntu package)
kernel (Red Hat package)
kernel-rt (Red Hat package)
perf-debuginfo
bpftool
kernel-debuginfo
python3-perf-debuginfo
kernel-tools-debuginfo
python3-perf
python2-perf
kernel-debugsource
python2-perf-debuginfo
perf
kernel-source
bpftool-debuginfo
kernel-devel
kernel-tools
kernel-tools-devel
kernel-tools-libs-devel
kernel-tools-libs
kernel-modules-internal
kernel-modules-extra
kernel-modules
kernel-headers
kernel-debug-modules-extra
kernel-debug-modules
kernel-debug-devel
kernel-debug-core
kernel-debug
kernel-core
linux-image-oem (Ubuntu package)
linux-image-oem-osp1 (Ubuntu package)
linux-image-5.4.0-77-generic (Ubuntu package)
linux-image-5.4.0-77-generic-lpae (Ubuntu package)
linux-image-5.4.0-77-lowlatency (Ubuntu package)
linux-image-generic-hwe-18.04 (Ubuntu package)
linux-image-generic-lpae-hwe-18.04 (Ubuntu package)
linux-image-snapdragon-hwe-18.04 (Ubuntu package)
linux-image-lowlatency-hwe-18.04 (Ubuntu package)
linux-image-virtual-hwe-18.04 (Ubuntu package)
linux-image-5.4.0-1018-gkeop (Ubuntu package)
linux-image-gkeop-5.4 (Ubuntu package)
linux-image-gkeop (Ubuntu package)
linux-image-raspi-hwe-18.04 (Ubuntu package)
linux-image-5.4.0-1038-raspi (Ubuntu package)
linux-image-raspi (Ubuntu package)
linux-image-5.4.0-1041-kvm (Ubuntu package)
linux-image-gcp (Ubuntu package)
linux-image-5.4.0-1046-gke (Ubuntu package)
linux-image-gke-5.4 (Ubuntu package)
linux-image-5.4.0-1046-gcp (Ubuntu package)
linux-image-gke (Ubuntu package)
linux-image-gcp-lts-20.04 (Ubuntu package)
linux-image-oracle-lts-20.04 (Ubuntu package)
linux-image-5.4.0-1048-oracle (Ubuntu package)
linux-image-oracle (Ubuntu package)
linux-image-azure (Ubuntu package)
linux-image-aws (Ubuntu package)
linux-image-azure-lts-20.04 (Ubuntu package)
linux-image-5.4.0-1051-aws (Ubuntu package)
linux-image-aws-lts-20.04 (Ubuntu package)
linux-image-5.4.0-1051-azure (Ubuntu package)
linux-image-generic-64k (Ubuntu package)
linux-image-5.8.0-59-generic (Ubuntu package)
linux-image-5.8.0-59-generic-64k (Ubuntu package)
linux-image-5.8.0-59-lowlatency (Ubuntu package)
linux-image-5.8.0-59-generic-lpae (Ubuntu package)
linux-image-lowlatency-hwe-20.04 (Ubuntu package)
linux-image-generic-hwe-20.04 (Ubuntu package)
linux-image-generic-64k-hwe-20.04 (Ubuntu package)
linux-image-virtual-hwe-20.04 (Ubuntu package)
linux-image-generic-lpae-hwe-20.04 (Ubuntu package)
linux-image-raspi-nolpae (Ubuntu package)
linux-image-5.8.0-1029-raspi-nolpae (Ubuntu package)
linux-image-5.8.0-1029-raspi (Ubuntu package)
linux-image-5.8.0-1030-kvm (Ubuntu package)
linux-image-5.8.0-1033-oracle (Ubuntu package)
linux-image-5.8.0-1035-gcp (Ubuntu package)
linux-image-5.8.0-1036-azure (Ubuntu package)
linux-image-5.8.0-1038-aws (Ubuntu package)
linux-image-5.10.0-1029-oem (Ubuntu package)
linux-image-oem-20.04b (Ubuntu package)
linux-image-oem-20.04 (Ubuntu package)

How to mitigate CVE-2021-31829

Install updates from vendor's website.

linux-image-aws-hwe (Ubuntu package) - update to Ubuntu Pro (Infra-only)
kernel - update to 4.14.232-123.381
linux-image-virtual (Ubuntu package) - addressed in versions 4.15.0.151.139, 5.4.0.77.80, 5.8.0.59.64
linux-image-lowlatency (Ubuntu package) - addressed in versions 4.15.0.151.139, 5.4.0.77.80, 5.8.0.59.64
linux-image-generic-lpae (Ubuntu package) - addressed in versions 4.15.0.151.139, 5.4.0.77.80, 5.8.0.59.64
linux-image-generic (Ubuntu package) - addressed in versions 4.15.0.151.139, 5.4.0.77.80, 5.8.0.59.64
linux-image-4.15.0-151-generic (Ubuntu package) - update to 4.15.0-151.157
linux-image-4.15.0-151-generic-lpae (Ubuntu package) - update to 4.15.0-151.157
linux-image-4.15.0-151-lowlatency (Ubuntu package) - update to 4.15.0-151.157
linux-image-virtual-hwe-16.04 (Ubuntu package) - update to 4.15.0.210.193
linux-image-lowlatency-hwe-16.04 (Ubuntu package) - update to 4.15.0.210.193
linux-image-generic-hwe-16.04 (Ubuntu package) - update to 4.15.0.210.193
linux-image-4.15.0-1078-oracle (Ubuntu package) - update to 4.15.0-1078.86
linux-image-oracle-lts-18.04 (Ubuntu package) - update to 4.15.0.1078.88
linux-image-raspi2 (Ubuntu package) - addressed in versions 4.15.0.1092.90, 5.4.0.1038.73
linux-image-4.15.0-1092-raspi2 (Ubuntu package) - update to 4.15.0-1092.98
linux-image-kvm (Ubuntu package) - addressed in versions 4.15.0.1097.93, 5.4.0.1041.39, 5.8.0.1030.32
linux-image-4.15.0-1097-kvm (Ubuntu package) - update to 4.15.0-1097.99
linux-image-4.15.0-1106-gcp (Ubuntu package) - update to 4.15.0-1106.120
linux-image-gcp-lts-18.04 (Ubuntu package) - update to 4.15.0.1106.125
linux-image-aws-lts-18.04 (Ubuntu package) - update to 4.15.0.1109.112
linux-image-snapdragon (Ubuntu package) - update to 4.15.0.1109.112
linux-image-4.15.0-1109-aws (Ubuntu package) - update to 4.15.0-1109.116
linux-image-4.15.0-1109-snapdragon (Ubuntu package) - update to 4.15.0-1109.118
linux-image-azure-lts-18.04 (Ubuntu package) - update to 4.15.0.1121.94
linux-image-4.15.0-1121-azure (Ubuntu package) - update to 4.15.0-1121.134
kernel (Red Hat package) - update to 4.18.0-348.el8
kernel-rt (Red Hat package) - update to 4.18.0-348.rt7.130.el8
perf-debuginfo - update to 4.19.90-2106.3.0.0095
bpftool - update to 4.19.90-2106.3.0.0095
kernel-debuginfo - update to 4.19.90-2106.3.0.0095
python3-perf-debuginfo - update to 4.19.90-2106.3.0.0095
kernel-tools-debuginfo - update to 4.19.90-2106.3.0.0095
python3-perf - update to 4.19.90-2106.3.0.0095
python2-perf - update to 4.19.90-2106.3.0.0095
kernel-debugsource - update to 4.19.90-2106.3.0.0095
python2-perf-debuginfo - update to 4.19.90-2106.3.0.0095
kernel - update to 4.19.90-2106.3.0.0095
perf - update to 4.19.90-2106.3.0.0095
kernel-source - update to 4.19.90-2106.3.0.0095
bpftool-debuginfo - update to 4.19.90-2106.3.0.0095
kernel-devel - update to 4.19.90-2106.3.0.0095
kernel-tools - update to 4.19.90-2106.3.0.0095
kernel-tools-devel - update to 4.19.90-2106.3.0.0095
python3-perf - update to 4.19.91-25.6
perf - update to 4.19.91-25.6
kernel-tools-libs-devel - update to 4.19.91-25.6
kernel-tools-libs - update to 4.19.91-25.6
kernel-tools - update to 4.19.91-25.6
kernel-modules-internal - update to 4.19.91-25.6
kernel-modules-extra - update to 4.19.91-25.6
kernel-modules - update to 4.19.91-25.6
kernel-headers - update to 4.19.91-25.6
kernel-devel - update to 4.19.91-25.6
kernel-debug-modules-extra - update to 4.19.91-25.6
kernel-debug-modules - update to 4.19.91-25.6
kernel-debug-devel - update to 4.19.91-25.6
kernel-debug-core - update to 4.19.91-25.6
kernel-debug - update to 4.19.91-25.6
kernel-core - update to 4.19.91-25.6
kernel - update to 4.19.91-25.6
bpftool - update to 4.19.91-25.6
linux-image-oem (Ubuntu package) - addressed in versions 5.4.0.77.80, 5.4.0.77.86~18.04.69, 5.4.0.202.198
linux-image-oem-osp1 (Ubuntu package) - addressed in versions 5.4.0.77.80, 5.4.0.77.86~18.04.69
linux-image-5.4.0-77-generic (Ubuntu package) - addressed in versions 5.4.0-77.86, 5.4.0-77.86~18.04.1
linux-image-5.4.0-77-generic-lpae (Ubuntu package) - addressed in versions 5.4.0-77.86, 5.4.0-77.86~18.04.1
linux-image-5.4.0-77-lowlatency (Ubuntu package) - addressed in versions 5.4.0-77.86, 5.4.0-77.86~18.04.1
linux-image-generic-hwe-18.04 (Ubuntu package) - update to 5.4.0.77.86~18.04.69
linux-image-generic-lpae-hwe-18.04 (Ubuntu package) - update to 5.4.0.77.86~18.04.69
linux-image-snapdragon-hwe-18.04 (Ubuntu package) - update to 5.4.0.77.86~18.04.69
linux-image-lowlatency-hwe-18.04 (Ubuntu package) - update to 5.4.0.77.86~18.04.69
linux-image-virtual-hwe-18.04 (Ubuntu package) - update to 5.4.0.77.86~18.04.69
linux-image-5.4.0-1018-gkeop (Ubuntu package) - addressed in versions 5.4.0-1018.19, 5.4.0-1018.19~18.04.1
linux-image-gkeop-5.4 (Ubuntu package) - addressed in versions 5.4.0.1018.19~18.04.19, 5.4.0.1018.21
linux-image-gkeop (Ubuntu package) - update to 5.4.0.1018.21
linux-image-raspi-hwe-18.04 (Ubuntu package) - update to 5.4.0.1038.40
linux-image-5.4.0-1038-raspi (Ubuntu package) - addressed in versions 5.4.0-1038.41, 5.4.0-1038.41~18.04.1
linux-image-raspi (Ubuntu package) - addressed in versions 5.4.0.1038.73, 5.8.0.1029.31
linux-image-5.4.0-1041-kvm (Ubuntu package) - update to 5.4.0-1041.42
linux-image-gcp (Ubuntu package) - addressed in versions 5.4.0.1046.33, 5.8.0.1035.35, 5.8.0.1035.37~20.04.9, 6.8.0-1019.21~22.04.1
linux-image-5.4.0-1046-gke (Ubuntu package) - addressed in versions 5.4.0-1046.48, 5.4.0-1046.48~18.04.1
linux-image-gke-5.4 (Ubuntu package) - addressed in versions 5.4.0.1046.48~18.04.12, 5.4.0.1046.55
linux-image-5.4.0-1046-gcp (Ubuntu package) - addressed in versions 5.4.0-1046.49, 5.4.0-1046.49~18.04.1
linux-image-gke (Ubuntu package) - addressed in versions 5.4.0.1046.55, 5.8.0.1035.35, 6.8.0-1015.19
linux-image-gcp-lts-20.04 (Ubuntu package) - update to 5.4.0.1046.55
linux-image-oracle-lts-20.04 (Ubuntu package) - update to 5.4.0.1048.48
linux-image-5.4.0-1048-oracle (Ubuntu package) - addressed in versions 5.4.0-1048.52, 5.4.0-1048.52~18.04.1
linux-image-oracle (Ubuntu package) - addressed in versions 5.4.0.1048.52~18.04.30, 5.8.0.1033.32, 5.8.0.1033.34~20.04.9, 6.8.0-1017.18~22.04.1
linux-image-azure (Ubuntu package) - addressed in versions 5.4.0.1051.30, 5.8.0.1036.36, 5.8.0.1036.38~20.04.8, 6.8.0-1018.21~22.04.1
linux-image-aws (Ubuntu package) - addressed in versions 5.4.0.1051.33, 5.8.0.1038.40~20.04.11
linux-image-azure-lts-20.04 (Ubuntu package) - update to 5.4.0.1051.49
linux-image-5.4.0-1051-aws (Ubuntu package) - addressed in versions 5.4.0-1051.53, 5.4.0-1051.53~18.04.1
linux-image-aws-lts-20.04 (Ubuntu package) - update to 5.4.0.1051.53
linux-image-5.4.0-1051-azure (Ubuntu package) - addressed in versions 5.4.0-1051.53, 5.4.0-1051.53~18.04.1
linux-image-generic-64k (Ubuntu package) - update to 5.8.0.59.64
linux-image-5.8.0-59-generic (Ubuntu package) - update to 5.8.0-59.66~20.04.1
linux-image-5.8.0-59-generic-64k (Ubuntu package) - update to 5.8.0-59.66~20.04.1
linux-image-5.8.0-59-lowlatency (Ubuntu package) - update to 5.8.0-59.66~20.04.1
linux-image-5.8.0-59-generic-lpae (Ubuntu package) - update to 5.8.0-59.66~20.04.1
linux-image-lowlatency-hwe-20.04 (Ubuntu package) - update to 5.8.0.59.66~20.04.42
linux-image-generic-hwe-20.04 (Ubuntu package) - update to 5.8.0.59.66~20.04.42
linux-image-generic-64k-hwe-20.04 (Ubuntu package) - update to 5.8.0.59.66~20.04.42
linux-image-virtual-hwe-20.04 (Ubuntu package) - update to 5.8.0.59.66~20.04.42
linux-image-generic-lpae-hwe-20.04 (Ubuntu package) - update to 5.8.0.59.66~20.04.42
linux-image-raspi-nolpae (Ubuntu package) - update to 5.8.0.1029.31
linux-image-5.8.0-1029-raspi-nolpae (Ubuntu package) - update to 5.8.0-1029.32
linux-image-5.8.0-1029-raspi (Ubuntu package) - update to 5.8.0-1029.32
linux-image-5.8.0-1030-kvm (Ubuntu package) - update to 5.8.0-1030.32
linux-image-5.8.0-1033-oracle (Ubuntu package) - update to 5.8.0-1033.34~20.04.1
linux-image-5.8.0-1035-gcp (Ubuntu package) - update to 5.8.0-1035.37~20.04.1
linux-image-5.8.0-1036-azure (Ubuntu package) - update to 5.8.0-1036.38~20.04.1
linux-image-5.8.0-1038-aws (Ubuntu package) - update to 5.8.0-1038.40~20.04.1
linux-image-5.10.0-1029-oem (Ubuntu package) - update to 5.10.0-1029.30
linux-image-oem-20.04b (Ubuntu package) - update to 5.10.0.1029.30
linux-image-oem-20.04 (Ubuntu package) - update to 5.10.0.1029.30
kernel-tools - addressed in versions 5.11.19-100.fc32, 5.11.19-200.fc33, 5.11.19-300.fc34
kernel-headers - addressed in versions 5.11.19-100.fc32, 5.11.19-200.fc33, 5.11.19-300.fc34
kernel - addressed in versions 5.11.19-100.fc32, 5.11.19-200.fc33, 5.11.19-300.fc34

External References

Related Security Bulletins