CVE-2021-29154 — Command Injection in Kernel

CWE-77 — Command InjectionCWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer16 documents7 sources
Severity
7.8HIGHNVD
EPSS
0.0%
top 89.17%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
10
Linux KernelDebian LinuxDebian Linux+7 more
Timeline
PublishedApr 8
Latest updateMay 24

Description

BPF JIT compilers in the Linux kernel through 5.11.12 have incorrect computation of branch displacements, allowing them to execute arbitrary code within the kernel context. This affects arch/x86/net/bpf_jit_comp.c and arch/x86/net/bpf_jit_comp32.c.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages10 packages

▶NVDlinux/linux_kernel3.0 — 4.4.266+6
▶Debianlinux/linux_kernel< 5.10.28-1+3
▶Ubuntulinux/linux_kernel< 4.4.0-210.242+6

Also affects: Debian Linux 9.0, Fedora 33

Patches

Patch: www.openwall.com ↗Patch: www.openwall.com ↗

🔴Vulnerability Details

7
GHSA
GHSA-q7mp-r58x-5fjf: Incorrect computation of branch displacements in BPF JIT compilers the Linux kernel can be abused to execute arbitrary code in Kernel mode↗2022-05-24
▶
OSV
Kernel Live Patch Security Notice↗2021-05-03
▶
OSV
linux, linux-aws, linux-gke-5.3, linux-hwe, linux-kvm, linux-lts-xenial, linux-oem-5.6, linux-raspi2, linux-raspi2-5.3, linux-snapdragon regression↗2021-04-22
▶
OSV
linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-gcp, linux-gcp-5.4, linux-gke-5.3, linux-gke-5.4, linux-gkeop, linux-gkeop-5.4, linux-hwe, linux-hwe-5.4, linux-hwe-5.8, linux-kvm,↗2021-04-15
▶
OSV
linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-dell300x, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-lts-xenial, linux-oracle, linux-raspi2, linux-snapdragon vulnerab↗2021-04-15
▶

📋Vendor Advisories

8
Ubuntu
Kernel Live Patch Security Notice↗2021-05-03
▶
Ubuntu
Linux kernel regression↗2021-04-22
▶
Ubuntu
Linux kernel vulnerabilities↗2021-04-15
▶
Ubuntu
Linux kernel vulnerabilities↗2021-04-15
▶
Microsoft
BPF JIT compilers in the Linux kernel through 5.11.12 have incorrect computation of branch displacements allowing them to execute arbitrary code within the kernel context. This affects arch/x86/net/bp↗2021-04-13
▶