CVE-2021-20320 — Sensitive Information Exposure

Vendor	Product	Version range	Fixed in
debian	linux	< linux 5.14.9-1 (bookworm)	linux 5.14.9-1 (bookworm)
fedoraproject	fedora	—	—
linux	linux_kernel	< 5.15	5.15
linux	linux_kernel	—	—
linux	linux_kernel	—	—
linux	linux_kernel	>= 0 < 5.10.70-1	5.10.70-1
linux	linux_kernel	>= 0 < 5.14.9-1	5.14.9-1
linux	linux_kernel	>= 0 < 5.14.9-1	5.14.9-1
linux	linux_kernel	>= 0 < 5.14.9-1	5.14.9-1
msrc	cbl_mariner_1.0_arm	—	—
msrc	cbl_mariner_1.0_x64	—	—
msrc	cm1_kernel_5.10.102.1-1_on_cbl_mariner_1.0	—	—
redhat	enterprise_linux	—	—
redhat	enterprise_linux	—	—

GHSA

GHSA-9q69-f33x-263w: A flaw was found in s390 eBPF JIT in bpf_jit_insn in arch/s390/net/bpf_jit_comp

ghsa_unreviewed·2022-02-19

CVE-2021-20320 [MEDIUM] CWE-200 GHSA-9q69-f33x-263w: A flaw was found in s390 eBPF JIT in bpf_jit_insn in arch/s390/net/bpf_jit_comp A flaw was found in s390 eBPF JIT in bpf_jit_insn in arch/s390/net/bpf_jit_comp.c in the Linux kernel. In this flaw, a local attacker with special user privilege can circumvent the verifier and may lead to a confidentiality problem.

OSV

CVE-2021-20320: A flaw was found in s390 eBPF JIT in bpf_jit_insn in arch/s390/net/bpf_jit_comp

osv·2022-02-18·CVSS 5.5

CVE-2021-20320 [MEDIUM] CVE-2021-20320: A flaw was found in s390 eBPF JIT in bpf_jit_insn in arch/s390/net/bpf_jit_comp A flaw was found in s390 eBPF JIT in bpf_jit_insn in arch/s390/net/bpf_jit_comp.c in the Linux kernel. In this flaw, a local attacker with special user privilege can circumvent the verifier and may lead to a confidentiality problem.

Microsoft

A flaw was found in s390 eBPF JIT in bpf_jit_insn in arch/s390/net/bpf_jit_comp.c in the Linux kernel. In this flaw a local attacker with special user privilege can circumvent the verifier and may lea

vendor_msrc·2022-02-08·CVSS 5.5

CVE-2021-20320 [MEDIUM] CWE-200 A flaw was found in s390 eBPF JIT in bpf_jit_insn in arch/s390/net/bpf_jit_comp.c in the Linux kernel. In this flaw a local attacker with special user privilege can circumvent the verifier and may lea A flaw was found in s390 eBPF JIT in bpf_jit_insn in arch/s390/net/bpf_jit_comp.c in the Linux kernel. In this flaw a local attacker with special user privilege can circumvent the verifier and may lead to a confidentiality problem. FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is

Red Hat

kernel: s390 eBPF JIT miscompilation issues fixes

vendor_redhat·2021-09-06·CVSS 5.5

CVE-2021-20320 [MEDIUM] CWE-200 kernel: s390 eBPF JIT miscompilation issues fixes kernel: s390 eBPF JIT miscompilation issues fixes A flaw was found in s390 eBPF JIT in bpf_jit_insn in arch/s390/net/bpf_jit_comp.c in the Linux kernel. In this flaw, a local attacker with special user privilege can circumvent the verifier and may lead to a confidentiality problem. A flaw was found in s390 eBPF JIT in bpf_jit_insn in arch/s390/net/bpf_jit_comp.c in the Linux kernel. In this flaw, a local attacker with special user privilege can circumvent the verifier and may lead to a confidentiality problem. Statement: The default Red Hat Enterprise Linux kernel prevents unprivileged users from being able to use eBPF by the kernel.unprivileged_bpf_disabled sysctl. This would require a privileged user with CAP_SYS_ADMIN or root to be able to abuse this flaw reducing its attack space. F

Debian

CVE-2021-20320: linux - A flaw was found in s390 eBPF JIT in bpf_jit_insn in arch/s390/net/bpf_jit_comp....

vendor_debian·2021·CVSS 5.5

CVE-2021-20320 [MEDIUM] CVE-2021-20320: linux - A flaw was found in s390 eBPF JIT in bpf_jit_insn in arch/s390/net/bpf_jit_comp.... A flaw was found in s390 eBPF JIT in bpf_jit_insn in arch/s390/net/bpf_jit_comp.c in the Linux kernel. In this flaw, a local attacker with special user privilege can circumvent the verifier and may lead to a confidentiality problem. Scope: local bookworm: resolved (fixed in 5.14.9-1) bullseye: resolved (fixed in 5.10.70-1) forky: resolved (fixed in 5.14.9-1) sid: resolved (fixed in 5.14.9-1) trixie: resolved (fixed in 5.14.9-1)

CVE-2021-20320: A flaw was found in s390 eBPF JIT in bpf_jit_insn in arch/s390/net/bpf_jit_comp.c in the Linux kernel. In this flaw, a local attacker with special user…

Affected

CVSS provenance