BPF JIT compilers in the Linux kernel through 5.11.12 have incorrect computation of branch displacements, allowing them to execute arbitrary code within the kernel context. This affects arch/x86/net/bpfjitcomp.c and arch/x86/net/bpfjitcomp32.c.
{
"unresolved_ranges": [
{
"extracted_events": [
{
"last_affected": "9.0"
}
],
"cpe": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
"source": "CPE_FIELD"
},
{
"extracted_events": [
{
"last_affected": "33"
}
],
"cpe": "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
"source": "CPE_FIELD"
},
{
"extracted_events": [
{
"introduced": "3.0"
},
{
"fixed": "4.4.266"
},
{
"introduced": "4.5"
},
{
"fixed": "4.9.266"
},
{
"introduced": "4.10"
},
{
"fixed": "4.14.230"
},
{
"introduced": "4.15"
},
{
"fixed": "4.19.186"
},
{
"introduced": "4.20"
},
{
"fixed": "5.4.111"
},
{
"introduced": "5.5"
},
{
"fixed": "5.10.29"
},
{
"introduced": "5.11"
},
{
"fixed": "5.11.13"
}
],
"cpe": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"source": "CPE_FIELD"
},
{
"extracted_events": [
{
"fixed": "5.11.12"
}
],
"source": "DESCRIPTION"
}
]
}