Memory leak in Linux kernel - CVE-2021-4159

Vulnerability identifier: #VU67913

CSH Severity: Low

CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-4159

CWE-ID: CWE-401

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists due memory leak in Linux kernel EBPF verifier when handling internal data structures. A local user with permissions to insert eBPF code to the kernel can force the kernel to leak internal kernel memory details and bypass mitigations, related to exploitation protection.

Linux kernel
SUSE Linux Enterprise Server 12 SP5 LTSS Extended
SUSE Linux Enterprise Server 12 SP5
Amazon Linux AMI
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Server 12
Anolis OS
SUSE Linux Enterprise Live Patching
Ubuntu
openEuler
linux-image-4.15.0-1147-aws-hwe (Ubuntu package)
linux-image-oem (Ubuntu package)
linux-image-lowlatency-hwe-16.04 (Ubuntu package)
linux-image-4.15.0-1142-gcp (Ubuntu package)
linux-image-4.15.0-1158-azure (Ubuntu package)
linux-image-4.15.0-201-generic (Ubuntu package)
linux-image-4.15.0-1112-oracle (Ubuntu package)
linux-image-4.15.0-201-lowlatency (Ubuntu package)
linux-image-gke (Ubuntu package)
linux-image-gcp (Ubuntu package)
linux-image-aws-hwe (Ubuntu package)
linux-image-generic-hwe-16.04 (Ubuntu package)
linux-image-oracle (Ubuntu package)
linux-image-virtual-hwe-16.04 (Ubuntu package)
linux-image-azure (Ubuntu package)
kgraft-patch-4_12_14-122_261-default
kernel-devel
cluster-md-kmp-default-debuginfo
kernel-default-base-debuginfo
kernel-default-base
kernel-default-devel
gfs2-kmp-default-debuginfo
gfs2-kmp-default
kernel-default
ocfs2-kmp-default
kernel-source
kernel-macros
kernel-default-man
kernel-default-kgraft
kernel-syms
cluster-md-kmp-default
kernel-default-debugsource
kernel-default-debuginfo
dlm-kmp-default
ocfs2-kmp-default-debuginfo
dlm-kmp-default-debuginfo
kernel-default-kgraft-devel
kernel-default-devel-debuginfo
kernel
linux-image-lowlatency (Ubuntu package)
linux-image-virtual (Ubuntu package)
linux-image-generic (Ubuntu package)
linux-image-generic-lpae (Ubuntu package)
linux-image-4.15.0-201-generic-lpae (Ubuntu package)
linux-image-dell300x (Ubuntu package)
linux-image-4.15.0-1058-dell300x (Ubuntu package)
linux-image-oracle-lts-18.04 (Ubuntu package)
linux-image-raspi2 (Ubuntu package)
linux-image-4.15.0-1125-raspi2 (Ubuntu package)
linux-image-kvm (Ubuntu package)
linux-image-4.15.0-1133-kvm (Ubuntu package)
linux-image-gcp-lts-18.04 (Ubuntu package)
linux-image-snapdragon (Ubuntu package)
linux-image-4.15.0-1143-snapdragon (Ubuntu package)
linux-image-aws-lts-18.04 (Ubuntu package)
linux-image-4.15.0-1147-aws (Ubuntu package)
linux-image-azure-lts-18.04 (Ubuntu package)
kernel-tools
perf-debuginfo
perf
python3-perf-debuginfo
bpftool-debuginfo
kernel-debugsource
bpftool
python2-perf
python3-perf
kernel-debuginfo
python2-perf-debuginfo
kernel-tools-debuginfo
kernel-tools-devel
kernel-debug-modules
kernel-core
kernel-debug
kernel-debug-core
kernel-debug-devel
kernel-debug-modules-extra
kernel-headers
kernel-modules
kernel-modules-extra
kernel-modules-internal
kernel-tools-libs
kernel-tools-libs-devel
python-perf
linux-image-oem-osp1 (Ubuntu package)
linux-image-5.4.0-128-generic-lpae (Ubuntu package)
linux-image-5.4.0-128-generic (Ubuntu package)
linux-image-5.4.0-128-lowlatency (Ubuntu package)
linux-image-generic-hwe-18.04 (Ubuntu package)
linux-image-snapdragon-hwe-18.04 (Ubuntu package)
linux-image-generic-lpae-hwe-18.04 (Ubuntu package)
linux-image-virtual-hwe-18.04 (Ubuntu package)
linux-image-lowlatency-hwe-18.04 (Ubuntu package)
linux-image-5.4.0-1034-ibm (Ubuntu package)
linux-image-ibm (Ubuntu package)
linux-image-ibm-lts-20.04 (Ubuntu package)
linux-image-bluefield (Ubuntu package)
linux-image-5.4.0-1047-bluefield (Ubuntu package)
linux-image-gkeop-5.4 (Ubuntu package)
linux-image-gkeop (Ubuntu package)
linux-image-5.4.0-1054-gkeop (Ubuntu package)
linux-image-raspi-hwe-18.04 (Ubuntu package)
linux-image-5.4.0-1071-raspi (Ubuntu package)
linux-image-raspi (Ubuntu package)
linux-image-5.4.0-1076-kvm (Ubuntu package)
linux-image-oracle-lts-20.04 (Ubuntu package)
linux-image-5.4.0-1084-gke (Ubuntu package)
linux-image-gke-5.4 (Ubuntu package)
linux-image-5.4.0-1084-oracle (Ubuntu package)
linux-image-aws (Ubuntu package)
linux-image-aws-lts-20.04 (Ubuntu package)
linux-image-5.4.0-1086-aws (Ubuntu package)
linux-image-gcp-lts-20.04 (Ubuntu package)
linux-image-5.4.0-1090-gcp (Ubuntu package)
linux-image-5.4.0-1092-azure-fde (Ubuntu package)
linux-image-azure-fde (Ubuntu package)
RecoverPoint for VMs

Install updates from vendor's website.

linux-image-4.15.0-1147-aws-hwe (Ubuntu package) - update to Ubuntu Pro (Infra-only)
linux-image-oem (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 5.4.0.128.129, 5.4.0.128.144~18.04.107
linux-image-lowlatency-hwe-16.04 (Ubuntu package) - update to Ubuntu Pro (Infra-only)
linux-image-4.15.0-1142-gcp (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 4.15.0-1142.158
linux-image-4.15.0-1158-azure (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 4.15.0-1158.173
linux-image-4.15.0-201-generic (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 4.15.0-201.212
linux-image-4.15.0-1112-oracle (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 4.15.0-1112.123
linux-image-4.15.0-201-lowlatency (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 4.15.0-201.212
linux-image-gke (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 5.4.0.1084.92
linux-image-gcp (Ubuntu package) - update to Ubuntu Pro (Infra-only)
linux-image-aws-hwe (Ubuntu package) - update to Ubuntu Pro (Infra-only)
linux-image-generic-hwe-16.04 (Ubuntu package) - update to Ubuntu Pro (Infra-only)
linux-image-oracle (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 5.4.0.1084.92~18.04.61
linux-image-virtual-hwe-16.04 (Ubuntu package) - update to Ubuntu Pro (Infra-only)
linux-image-azure (Ubuntu package) - update to Ubuntu Pro (Infra-only)
kgraft-patch-4_12_14-122_261-default - update to 1-8.3.1
kernel-devel - update to 4.12.14-122.261.1
cluster-md-kmp-default-debuginfo - update to 4.12.14-122.261.1
kernel-default-base-debuginfo - update to 4.12.14-122.261.1
kernel-default-base - update to 4.12.14-122.261.1
kernel-default-devel - update to 4.12.14-122.261.1
gfs2-kmp-default-debuginfo - update to 4.12.14-122.261.1
gfs2-kmp-default - update to 4.12.14-122.261.1
kernel-default - update to 4.12.14-122.261.1
ocfs2-kmp-default - update to 4.12.14-122.261.1
kernel-source - update to 4.12.14-122.261.1
kernel-macros - update to 4.12.14-122.261.1
kernel-default-man - update to 4.12.14-122.261.1
kernel-default-kgraft - update to 4.12.14-122.261.1
kernel-syms - update to 4.12.14-122.261.1
cluster-md-kmp-default - update to 4.12.14-122.261.1
kernel-default-debugsource - update to 4.12.14-122.261.1
kernel-default-debuginfo - update to 4.12.14-122.261.1
dlm-kmp-default - update to 4.12.14-122.261.1
ocfs2-kmp-default-debuginfo - update to 4.12.14-122.261.1
dlm-kmp-default-debuginfo - update to 4.12.14-122.261.1
kernel-default-kgraft-devel - update to 4.12.14-122.261.1
kernel-default-devel-debuginfo - update to 4.12.14-122.261.1
kernel - update to 4.14.294-150.533
linux-image-lowlatency (Ubuntu package) - addressed in versions 4.15.0.201.184, 5.4.0.128.129
linux-image-virtual (Ubuntu package) - addressed in versions 4.15.0.201.184, 5.4.0.128.129
linux-image-generic (Ubuntu package) - addressed in versions 4.15.0.201.184, 5.4.0.128.129
linux-image-generic-lpae (Ubuntu package) - addressed in versions 4.15.0.201.184, 5.4.0.128.129
linux-image-4.15.0-201-generic-lpae (Ubuntu package) - update to 4.15.0-201.212
linux-image-dell300x (Ubuntu package) - update to 4.15.0.1058.57
linux-image-4.15.0-1058-dell300x (Ubuntu package) - update to 4.15.0-1058.63
linux-image-oracle-lts-18.04 (Ubuntu package) - update to 4.15.0.1112.117
linux-image-raspi2 (Ubuntu package) - addressed in versions 4.15.0.1125.120, 5.4.0.1071.104
linux-image-4.15.0-1125-raspi2 (Ubuntu package) - update to 4.15.0-1125.133
linux-image-kvm (Ubuntu package) - addressed in versions 4.15.0.1133.124, 5.4.0.1076.73
linux-image-4.15.0-1133-kvm (Ubuntu package) - update to 4.15.0-1133.138
linux-image-gcp-lts-18.04 (Ubuntu package) - update to 4.15.0.1142.156
linux-image-snapdragon (Ubuntu package) - update to 4.15.0.1143.142
linux-image-4.15.0-1143-snapdragon (Ubuntu package) - update to 4.15.0-1143.153
linux-image-aws-lts-18.04 (Ubuntu package) - update to 4.15.0.1147.145
linux-image-4.15.0-1147-aws (Ubuntu package) - update to 4.15.0-1147.159
linux-image-azure-lts-18.04 (Ubuntu package) - update to 4.15.0.1158.126
kernel-devel - update to 4.19.90-2203.1.0.0139
kernel-tools - update to 4.19.90-2203.1.0.0139
perf-debuginfo - update to 4.19.90-2203.1.0.0139
perf - update to 4.19.90-2203.1.0.0139
kernel - update to 4.19.90-2203.1.0.0139
python3-perf-debuginfo - update to 4.19.90-2203.1.0.0139
bpftool-debuginfo - update to 4.19.90-2203.1.0.0139
kernel-debugsource - update to 4.19.90-2203.1.0.0139
bpftool - update to 4.19.90-2203.1.0.0139
python2-perf - update to 4.19.90-2203.1.0.0139
kernel-source - update to 4.19.90-2203.1.0.0139
python3-perf - update to 4.19.90-2203.1.0.0139
kernel-debuginfo - update to 4.19.90-2203.1.0.0139
python2-perf-debuginfo - update to 4.19.90-2203.1.0.0139
kernel-tools-debuginfo - update to 4.19.90-2203.1.0.0139
kernel-tools-devel - update to 4.19.90-2203.1.0.0139
kernel-debug-modules - addressed in versions 4.19.91-26.6, 4.19.91-27
bpftool - addressed in versions 4.19.91-26.6, 4.19.91-27
python3-perf - addressed in versions 4.19.91-26.6, 4.19.91-27
perf - addressed in versions 4.19.91-26.6, 4.19.91-27
kernel - addressed in versions 4.19.91-26.6, 4.19.91-27
kernel-core - addressed in versions 4.19.91-26.6, 4.19.91-27
kernel-debug - addressed in versions 4.19.91-26.6, 4.19.91-27
kernel-debug-core - addressed in versions 4.19.91-26.6, 4.19.91-27
kernel-debug-devel - addressed in versions 4.19.91-26.6, 4.19.91-27
kernel-debug-modules-extra - addressed in versions 4.19.91-26.6, 4.19.91-27
kernel-devel - addressed in versions 4.19.91-26.6, 4.19.91-27
kernel-headers - addressed in versions 4.19.91-26.6, 4.19.91-27
kernel-modules - addressed in versions 4.19.91-26.6, 4.19.91-27
kernel-modules-extra - addressed in versions 4.19.91-26.6, 4.19.91-27
kernel-modules-internal - update to 4.19.91-26.6
kernel-tools - addressed in versions 4.19.91-26.6, 4.19.91-27
kernel-tools-libs - addressed in versions 4.19.91-26.6, 4.19.91-27
kernel-tools-libs-devel - addressed in versions 4.19.91-26.6, 4.19.91-27
python-perf - addressed in versions 4.19.91-26.6, 4.19.91-27
linux-image-oem-osp1 (Ubuntu package) - addressed in versions 5.4.0.128.129, 5.4.0.128.144~18.04.107
linux-image-5.4.0-128-generic-lpae (Ubuntu package) - update to 5.4.0-128.144~18.04.1
linux-image-5.4.0-128-generic (Ubuntu package) - update to 5.4.0-128.144~18.04.1
linux-image-5.4.0-128-lowlatency (Ubuntu package) - update to 5.4.0-128.144~18.04.1
linux-image-generic-hwe-18.04 (Ubuntu package) - update to 5.4.0.128.144~18.04.107
linux-image-snapdragon-hwe-18.04 (Ubuntu package) - update to 5.4.0.128.144~18.04.107
linux-image-generic-lpae-hwe-18.04 (Ubuntu package) - update to 5.4.0.128.144~18.04.107
linux-image-virtual-hwe-18.04 (Ubuntu package) - update to 5.4.0.128.144~18.04.107
linux-image-lowlatency-hwe-18.04 (Ubuntu package) - update to 5.4.0.128.144~18.04.107
linux-image-5.4.0-1034-ibm (Ubuntu package) - update to 5.4.0-1034.38~18.04.1
linux-image-ibm (Ubuntu package) - addressed in versions 5.4.0.1034.48, 5.4.0.1034.63
linux-image-ibm-lts-20.04 (Ubuntu package) - update to 5.4.0.1034.63
linux-image-bluefield (Ubuntu package) - update to 5.4.0.1047.46
linux-image-5.4.0-1047-bluefield (Ubuntu package) - update to 5.4.0-1047.52
linux-image-gkeop-5.4 (Ubuntu package) - update to 5.4.0.1054.55
linux-image-gkeop (Ubuntu package) - update to 5.4.0.1054.55
linux-image-5.4.0-1054-gkeop (Ubuntu package) - update to 5.4.0-1054.57
linux-image-raspi-hwe-18.04 (Ubuntu package) - update to 5.4.0.1071.71
linux-image-5.4.0-1071-raspi (Ubuntu package) - update to 5.4.0-1071.81~18.04.1
linux-image-raspi (Ubuntu package) - update to 5.4.0.1071.104
linux-image-5.4.0-1076-kvm (Ubuntu package) - update to 5.4.0-1076.81
linux-image-oracle-lts-20.04 (Ubuntu package) - update to 5.4.0.1084.81
linux-image-5.4.0-1084-gke (Ubuntu package) - update to 5.4.0-1084.90
linux-image-gke-5.4 (Ubuntu package) - update to 5.4.0.1084.92
linux-image-5.4.0-1084-oracle (Ubuntu package) - addressed in versions 5.4.0-1084.92, 5.4.0-1084.92~18.04.1
linux-image-aws (Ubuntu package) - update to 5.4.0.1086.66
linux-image-aws-lts-20.04 (Ubuntu package) - update to 5.4.0.1086.86
linux-image-5.4.0-1086-aws (Ubuntu package) - addressed in versions 5.4.0-1086.93, 5.4.0-1086.93~18.04.1
linux-image-gcp-lts-20.04 (Ubuntu package) - update to 5.4.0.1090.95
linux-image-5.4.0-1090-gcp (Ubuntu package) - update to 5.4.0-1090.98
linux-image-5.4.0-1092-azure-fde (Ubuntu package) - update to 5.4.0-1092.97+cvm1.1
linux-image-azure-fde (Ubuntu package) - update to 5.4.0.1092.97+cvm1.32
RecoverPoint for VMs - update to 6.0.SP1.P1

• https://access.redhat.com/security/cve/CVE-2021-4159
• https://bugzilla.redhat.com/show_bug.cgi?id=2036024
• https://security-tracker.debian.org/tracker/CVE-2021-4159
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=294f2fc6da27620a506e6c050241655459ccd6bd
• https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html

• Information disclosure in Linux kernel eBPF
• Amazon Linux AMI update for kernel
• Ubuntu update for linux
• Ubuntu update for linux-gcp
• Ubuntu update for linux-aws-5.4
• Ubuntu update for linux-azure-fde
• Ubuntu update for linux
• openEuler update for kernel
• Multiple vulnerabilities in Dell RecoverPoint for Virtual Machines
• Anolis OS update for kernel
• Anolis OS update for kernel(ANCK)4.19
• Anolis OS update for kernel(ANCK)4.19
• Anolis OS update for kernel(ANCK)4.19
• SUSE update for the Linux Kernel