ISOMAN

CVE

CVE-2019-7308

kernel/bpf/verifier.c in the Linux kernel before 4.20.6 performs undesirable out-of-bounds speculation on pointer arithmetic in various cases, including cases of different branches with different state or limits to sanitize, leading to side-channel attacks.

Severity
MEDIUM
CVSS
5.6
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu18.04.6 amd64 desktopunknownsource
Ubuntu18.04.6 amd64 live-serverunknownsource
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=979d63d50c0c0f7bc537bf821e056cc9fe5abd38
  2. http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d3bd7413e0ca40b60cf60d4003246d067cafdeda
  3. http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00052.html
  4. http://www.securityfocus.com/bid/106827
  5. https://bugs.chromium.org/p/project-zero/issues/detail?id=1711
  6. https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.20.6
  7. https://github.com/torvalds/linux/commit/979d63d50c0c0f7bc537bf821e056cc9fe5abd38
  8. https://github.com/torvalds/linux/commit/d3bd7413e0ca40b60cf60d4003246d067cafdeda
  9. https://support.f5.com/csp/article/K43030517
  10. https://support.f5.com/csp/article/K43030517?utm_source=f5support&amp%3Butm_medium=RSS
  11. https://usn.ubuntu.com/3930-1/
  12. https://usn.ubuntu.com/3930-2/
  13. https://usn.ubuntu.com/3931-1/
  14. https://usn.ubuntu.com/3931-2/
  15. http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=979d63d50c0c0f7bc537bf821e056cc9fe5abd38
  16. http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d3bd7413e0ca40b60cf60d4003246d067cafdeda
  17. http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00052.html
  18. http://www.securityfocus.com/bid/106827
  19. https://bugs.chromium.org/p/project-zero/issues/detail?id=1711
  20. https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.20.6