The eBPF ALU32 bounds tracking for bitwise ops (AND, OR and XOR) in the Linux kernel did not properly update 32-bit bounds, which could be turned into out of bounds reads and writes in the Linux kernel and therefore, arbitrary code execution. This issue was fixed via commit 049c4e13714e ("bpf: Fix alu32 const subreg bound tracking on bitwise operations") (v5.13-rc4) and backported to the stable kernels in v5.12.4, v5.11.21, and v5.10.37. The AND/OR issues were introduced by commit 3f50f132d840 ("bpf: Verifier, do explicit ALU32 bounds tracking") (5.7-rc1) and the XOR variant was introduced by 2921c90d4718 ("bpf:Fix a verifier failure with xor") ( 5.10-rc1).
{ "availability": "No subscription required", "binaries": [ { "binary_name": "block-modules-5.8.0-53-generic-64k-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "block-modules-5.8.0-53-generic-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "block-modules-5.8.0-53-generic-lpae-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "crypto-modules-5.8.0-53-generic-64k-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "crypto-modules-5.8.0-53-generic-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "crypto-modules-5.8.0-53-generic-lpae-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "dasd-extra-modules-5.8.0-53-generic-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "dasd-modules-5.8.0-53-generic-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "fat-modules-5.8.0-53-generic-64k-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "fat-modules-5.8.0-53-generic-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "fat-modules-5.8.0-53-generic-lpae-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "fb-modules-5.8.0-53-generic-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "firewire-core-modules-5.8.0-53-generic-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "floppy-modules-5.8.0-53-generic-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "fs-core-modules-5.8.0-53-generic-64k-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "fs-core-modules-5.8.0-53-generic-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "fs-core-modules-5.8.0-53-generic-lpae-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "fs-secondary-modules-5.8.0-53-generic-64k-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "fs-secondary-modules-5.8.0-53-generic-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "fs-secondary-modules-5.8.0-53-generic-lpae-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "input-modules-5.8.0-53-generic-64k-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "input-modules-5.8.0-53-generic-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "input-modules-5.8.0-53-generic-lpae-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "ipmi-modules-5.8.0-53-generic-64k-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "ipmi-modules-5.8.0-53-generic-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "ipmi-modules-5.8.0-53-generic-lpae-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "kernel-image-5.8.0-53-generic-64k-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "kernel-image-5.8.0-53-generic-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "kernel-image-5.8.0-53-generic-lpae-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "linux-buildinfo-5.8.0-53-generic", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "linux-buildinfo-5.8.0-53-generic-64k", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "linux-buildinfo-5.8.0-53-generic-lpae", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "linux-buildinfo-5.8.0-53-lowlatency", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "linux-cloud-tools-5.8.0-53-generic", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "linux-cloud-tools-5.8.0-53-lowlatency", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "linux-headers-5.8.0-53-generic", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "linux-headers-5.8.0-53-generic-64k", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "linux-headers-5.8.0-53-generic-lpae", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "linux-headers-5.8.0-53-lowlatency", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "linux-hwe-5.8-cloud-tools-5.8.0-53", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "linux-hwe-5.8-cloud-tools-common", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "linux-hwe-5.8-headers-5.8.0-53", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "linux-hwe-5.8-source-5.8.0", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "linux-hwe-5.8-tools-5.8.0-53", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "linux-hwe-5.8-tools-common", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "linux-hwe-5.8-tools-host", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "linux-hwe-5.8-udebs-generic", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "linux-hwe-5.8-udebs-generic-64k", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "linux-hwe-5.8-udebs-generic-lpae", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "linux-image-5.8.0-53-generic", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "linux-image-5.8.0-53-generic-dbgsym", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "linux-image-5.8.0-53-generic-lpae", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "linux-image-5.8.0-53-generic-lpae-dbgsym", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "linux-image-unsigned-5.8.0-53-generic", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "linux-image-unsigned-5.8.0-53-generic-64k", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "linux-image-unsigned-5.8.0-53-generic-64k-dbgsym", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "linux-image-unsigned-5.8.0-53-generic-dbgsym", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "linux-image-unsigned-5.8.0-53-lowlatency", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "linux-image-unsigned-5.8.0-53-lowlatency-dbgsym", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "linux-modules-5.8.0-53-generic", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "linux-modules-5.8.0-53-generic-64k", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "linux-modules-5.8.0-53-generic-lpae", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "linux-modules-5.8.0-53-lowlatency", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "linux-modules-extra-5.8.0-53-generic", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "linux-tools-5.8.0-53-generic", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "linux-tools-5.8.0-53-generic-64k", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "linux-tools-5.8.0-53-generic-lpae", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "linux-tools-5.8.0-53-lowlatency", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "md-modules-5.8.0-53-generic-64k-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "md-modules-5.8.0-53-generic-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "md-modules-5.8.0-53-generic-lpae-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "message-modules-5.8.0-53-generic-64k-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "message-modules-5.8.0-53-generic-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "mouse-modules-5.8.0-53-generic-64k-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "mouse-modules-5.8.0-53-generic-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "mouse-modules-5.8.0-53-generic-lpae-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "multipath-modules-5.8.0-53-generic-64k-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "multipath-modules-5.8.0-53-generic-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "multipath-modules-5.8.0-53-generic-lpae-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "nfs-modules-5.8.0-53-generic-64k-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "nfs-modules-5.8.0-53-generic-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "nfs-modules-5.8.0-53-generic-lpae-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "nic-modules-5.8.0-53-generic-64k-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "nic-modules-5.8.0-53-generic-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "nic-modules-5.8.0-53-generic-lpae-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "nic-pcmcia-modules-5.8.0-53-generic-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "nic-shared-modules-5.8.0-53-generic-64k-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "nic-shared-modules-5.8.0-53-generic-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "nic-shared-modules-5.8.0-53-generic-lpae-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "nic-usb-modules-5.8.0-53-generic-64k-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "nic-usb-modules-5.8.0-53-generic-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "nic-usb-modules-5.8.0-53-generic-lpae-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "parport-modules-5.8.0-53-generic-64k-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "parport-modules-5.8.0-53-generic-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "parport-modules-5.8.0-53-generic-lpae-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "pata-modules-5.8.0-53-generic-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "pcmcia-modules-5.8.0-53-generic-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "pcmcia-storage-modules-5.8.0-53-generic-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "plip-modules-5.8.0-53-generic-64k-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "plip-modules-5.8.0-53-generic-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "plip-modules-5.8.0-53-generic-lpae-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "ppp-modules-5.8.0-53-generic-64k-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "ppp-modules-5.8.0-53-generic-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "ppp-modules-5.8.0-53-generic-lpae-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "sata-modules-5.8.0-53-generic-64k-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "sata-modules-5.8.0-53-generic-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "sata-modules-5.8.0-53-generic-lpae-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "scsi-modules-5.8.0-53-generic-64k-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "scsi-modules-5.8.0-53-generic-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "scsi-modules-5.8.0-53-generic-lpae-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "serial-modules-5.8.0-53-generic-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "storage-core-modules-5.8.0-53-generic-64k-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "storage-core-modules-5.8.0-53-generic-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "storage-core-modules-5.8.0-53-generic-lpae-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "usb-modules-5.8.0-53-generic-64k-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "usb-modules-5.8.0-53-generic-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "usb-modules-5.8.0-53-generic-lpae-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "virtio-modules-5.8.0-53-generic-64k-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "virtio-modules-5.8.0-53-generic-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "vlan-modules-5.8.0-53-generic-64k-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "vlan-modules-5.8.0-53-generic-di", "binary_version": "5.8.0-53.60~20.04.1" }, { "binary_name": "vlan-modules-5.8.0-53-generic-lpae-di", "binary_version": "5.8.0-53.60~20.04.1" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "linux-buildinfo-5.10.0-1026-oem", "binary_version": "5.10.0-1026.27" }, { "binary_name": "linux-headers-5.10.0-1026-oem", "binary_version": "5.10.0-1026.27" }, { "binary_name": "linux-image-unsigned-5.10.0-1026-oem", "binary_version": "5.10.0-1026.27" }, { "binary_name": "linux-image-unsigned-5.10.0-1026-oem-dbgsym", "binary_version": "5.10.0-1026.27" }, { "binary_name": "linux-modules-5.10.0-1026-oem", "binary_version": "5.10.0-1026.27" }, { "binary_name": "linux-oem-5.10-headers-5.10.0-1026", "binary_version": "5.10.0-1026.27" }, { "binary_name": "linux-oem-5.10-tools-5.10.0-1026", "binary_version": "5.10.0-1026.27" }, { "binary_name": "linux-oem-5.10-tools-host", "binary_version": "5.10.0-1026.27" }, { "binary_name": "linux-tools-5.10.0-1026-oem", "binary_version": "5.10.0-1026.27" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "block-modules-5.8.0-25-generic-di", "binary_version": "5.8.0-25.27~20.04.1" }, { "binary_name": "crypto-modules-5.8.0-25-generic-di", "binary_version": "5.8.0-25.27~20.04.1" }, { "binary_name": "fat-modules-5.8.0-25-generic-di", "binary_version": "5.8.0-25.27~20.04.1" }, { "binary_name": "firewire-core-modules-5.8.0-25-generic-di", "binary_version": "5.8.0-25.27~20.04.1" }, { "binary_name": "fs-core-modules-5.8.0-25-generic-di", "binary_version": "5.8.0-25.27~20.04.1" }, { "binary_name": "fs-secondary-modules-5.8.0-25-generic-di", "binary_version": "5.8.0-25.27~20.04.1" }, { "binary_name": "input-modules-5.8.0-25-generic-di", "binary_version": "5.8.0-25.27~20.04.1" }, { "binary_name": "ipmi-modules-5.8.0-25-generic-di", "binary_version": "5.8.0-25.27~20.04.1" }, { "binary_name": "kernel-image-5.8.0-25-generic-di", "binary_version": "5.8.0-25.27~20.04.1" }, { "binary_name": "linux-buildinfo-5.8.0-25-generic", "binary_version": "5.8.0-25.27~20.04.1" }, { "binary_name": "linux-headers-5.8.0-25-generic", "binary_version": "5.8.0-25.27~20.04.1" }, { "binary_name": "linux-image-5.8.0-25-generic", "binary_version": "5.8.0-25.27~20.04.1" }, { "binary_name": "linux-image-5.8.0-25-generic-dbgsym", "binary_version": "5.8.0-25.27~20.04.1" }, { "binary_name": "linux-modules-5.8.0-25-generic", "binary_version": "5.8.0-25.27~20.04.1" }, { "binary_name": "linux-modules-extra-5.8.0-25-generic", "binary_version": "5.8.0-25.27~20.04.1" }, { "binary_name": "linux-riscv-5.8-headers-5.8.0-25", "binary_version": "5.8.0-25.27~20.04.1" }, { "binary_name": "linux-riscv-5.8-tools-5.8.0-25", "binary_version": "5.8.0-25.27~20.04.1" }, { "binary_name": "linux-tools-5.8.0-25-generic", "binary_version": "5.8.0-25.27~20.04.1" }, { "binary_name": "linux-udebs-generic", "binary_version": "5.8.0-25.27~20.04.1" }, { "binary_name": "md-modules-5.8.0-25-generic-di", "binary_version": "5.8.0-25.27~20.04.1" }, { "binary_name": "message-modules-5.8.0-25-generic-di", "binary_version": "5.8.0-25.27~20.04.1" }, { "binary_name": "mouse-modules-5.8.0-25-generic-di", "binary_version": "5.8.0-25.27~20.04.1" }, { "binary_name": "multipath-modules-5.8.0-25-generic-di", "binary_version": "5.8.0-25.27~20.04.1" }, { "binary_name": "nfs-modules-5.8.0-25-generic-di", "binary_version": "5.8.0-25.27~20.04.1" }, { "binary_name": "nic-modules-5.8.0-25-generic-di", "binary_version": "5.8.0-25.27~20.04.1" }, { "binary_name": "nic-shared-modules-5.8.0-25-generic-di", "binary_version": "5.8.0-25.27~20.04.1" }, { "binary_name": "nic-usb-modules-5.8.0-25-generic-di", "binary_version": "5.8.0-25.27~20.04.1" }, { "binary_name": "parport-modules-5.8.0-25-generic-di", "binary_version": "5.8.0-25.27~20.04.1" }, { "binary_name": "pata-modules-5.8.0-25-generic-di", "binary_version": "5.8.0-25.27~20.04.1" }, { "binary_name": "plip-modules-5.8.0-25-generic-di", "binary_version": "5.8.0-25.27~20.04.1" }, { "binary_name": "ppp-modules-5.8.0-25-generic-di", "binary_version": "5.8.0-25.27~20.04.1" }, { "binary_name": "sata-modules-5.8.0-25-generic-di", "binary_version": "5.8.0-25.27~20.04.1" }, { "binary_name": "scsi-modules-5.8.0-25-generic-di", "binary_version": "5.8.0-25.27~20.04.1" }, { "binary_name": "storage-core-modules-5.8.0-25-generic-di", "binary_version": "5.8.0-25.27~20.04.1" }, { "binary_name": "usb-modules-5.8.0-25-generic-di", "binary_version": "5.8.0-25.27~20.04.1" }, { "binary_name": "virtio-modules-5.8.0-25-generic-di", "binary_version": "5.8.0-25.27~20.04.1" }, { "binary_name": "vlan-modules-5.8.0-25-generic-di", "binary_version": "5.8.0-25.27~20.04.1" } ] }