NetSight
IP …
medium5.5

CVE-2021-34556

In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel…

Impact

In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because the protection mechanism neglects the possibility of uninitialized memory locations on the BPF stack.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
through 5.13.7
FedoraprojectFedora
Versions 33, 34
DebianDebian Linux
Version 9.0

Weakness classification

CWE-203

References