CVE-2021-29155
Detail
Modified
This CVE record has been updated after NVD enrichment efforts were completed. Enrichment data supplied by the NVD may require amendment due to these changes.
Description
An issue was discovered in the Linux kernel through 5.11.x. kernel/bpf/verifier.c performs undesirable out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory. Specifically, for sequences of pointer arithmetic operations, the pointer modification performed by the first operation is not correctly accounted for when restricting subsequent operations.
Metrics
CVSS Version 4.0
CVSS Version 3.x
CVSS Version 2.0
NVD enrichment efforts reference publicly available information to associate
vector strings. CVSS information contributed by other sources is also
displayed.
CVSS 4.0 Severity and Vector Strings:
NVD assessment
not yet provided.
CVSS 3.x Severity and Vector Strings:
Vector:
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 Severity and Vector Strings:
Vector:
(AV:L/AC:L/Au:N/C:P/I:N/A:N)
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving NIST webspace.
We have provided these links to other web sites because they
may have information that would be of interest to you. No
inferences should be drawn on account of other sites being
referenced, or not, from this page. There may be other web
sites that are more appropriate for your purpose. NIST does
not necessarily endorse the views expressed, or concur with
the facts presented on these sites. Further, NIST does not
endorse any commercial products that may be mentioned on
these sites. Please address comments about this page to [email protected] .
URL
Source(s)
Tag(s)
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=073815b756c51ba9d8384d924c5d1c03ca3d1ae4
CVE, MITRE
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=24c109bb1537c12c02aeed2d51a347b4d6a9b76e
CVE, MITRE
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6f55b2f2a1178856c19bbce2f71449926e731914
CVE, MITRE
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7fedb63a8307dda0ec3b8969a3b233a1dd7ea8e0
CVE, MITRE
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9601148392520e2e134936e76788fc2a6371e7be
CVE, MITRE
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a6aaece00a57fa6f22575364b3903dfbccf5345d
CVE, MITRE
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b658bbb844e28f1862867f37e8ca11a8e2aa94a3
CVE, MITRE
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f528819334881fd622fdadeddb3f7edaed8b7c9b
CVE, MITRE
https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html
CVE, MITRE
Mailing List
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CUX2CA63453G34C6KYVBLJXJXEARZI2X/
CVE, MITRE
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAEQ3H6HKNO6KUCGRZVYSFSAGEUX23JL/
CVE, MITRE
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XZASHZVCOFJ4VU2I3BN5W5EPHWJQ7QWX/
CVE, MITRE
https://www.kernel.org
CVE, MITRE
Vendor Advisory
https://www.openwall.com/lists/oss-security/2021/04/18/4
CVE, MITRE
Mailing List
Patch
Third Party Advisory
Weakness Enumeration
CWE-ID
CWE Name
Source
CWE-125
Out-of-bounds Read
NIST
Change History
11 change records found show changes
CVE Modified by CVE 11/21/2024 1:00:47 AM
Action
Type
Old Value
New Value
Added
Reference
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=073815b756c51ba9d8384d924c5d1c03ca3d1ae4
Added
Reference
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=24c109bb1537c12c02aeed2d51a347b4d6a9b76e
Added
Reference
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6f55b2f2a1178856c19bbce2f71449926e731914
Added
Reference
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7fedb63a8307dda0ec3b8969a3b233a1dd7ea8e0
Added
Reference
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9601148392520e2e134936e76788fc2a6371e7be
Added
Reference
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a6aaece00a57fa6f22575364b3903dfbccf5345d
Added
Reference
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b658bbb844e28f1862867f37e8ca11a8e2aa94a3
Added
Reference
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f528819334881fd622fdadeddb3f7edaed8b7c9b
Added
Reference
https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html
Added
Reference
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CUX2CA63453G34C6KYVBLJXJXEARZI2X/
Added
Reference
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAEQ3H6HKNO6KUCGRZVYSFSAGEUX23JL/
Added
Reference
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XZASHZVCOFJ4VU2I3BN5W5EPHWJQ7QWX/
Added
Reference
https://www.kernel.org
Added
Reference
https://www.openwall.com/lists/oss-security/2021/04/18/4
CVE Modified by MITRE 5/14/2024 4:47:06 AM
Action
Type
Old Value
New Value
CVE Modified by MITRE 3/24/2024 9:15:50 PM
Action
Type
Old Value
New Value
Added
Reference
MITRE https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=073815b756c51ba9d8384d924c5d1c03ca3d1ae4 [No types assigned]
Added
Reference
MITRE https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=24c109bb1537c12c02aeed2d51a347b4d6a9b76e [No types assigned]
Added
Reference
MITRE https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6f55b2f2a1178856c19bbce2f71449926e731914 [No types assigned]
Added
Reference
MITRE https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7fedb63a8307dda0ec3b8969a3b233a1dd7ea8e0 [No types assigned]
Added
Reference
MITRE https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9601148392520e2e134936e76788fc2a6371e7be [No types assigned]
Added
Reference
MITRE https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a6aaece00a57fa6f22575364b3903dfbccf5345d [No types assigned]
Added
Reference
MITRE https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b658bbb844e28f1862867f37e8ca11a8e2aa94a3 [No types assigned]
Added
Reference
MITRE https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f528819334881fd622fdadeddb3f7edaed8b7c9b [No types assigned]
CVE Modified by MITRE 11/06/2023 10:32:33 PM
Action
Type
Old Value
New Value
Added
Reference
MITRE https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CUX2CA63453G34C6KYVBLJXJXEARZI2X/ [No types assigned]
Added
Reference
MITRE https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAEQ3H6HKNO6KUCGRZVYSFSAGEUX23JL/ [No types assigned]
Added
Reference
MITRE https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XZASHZVCOFJ4VU2I3BN5W5EPHWJQ7QWX/ [No types assigned]
Removed
Reference
MITRE https://lists.fedoraproject.org/archives/list/[email protected] /message/CUX2CA63453G34C6KYVBLJXJXEARZI2X/
Removed
Reference
MITRE https://lists.fedoraproject.org/archives/list/[email protected] /message/PAEQ3H6HKNO6KUCGRZVYSFSAGEUX23JL/
Removed
Reference
MITRE https://lists.fedoraproject.org/archives/list/[email protected] /message/XZASHZVCOFJ4VU2I3BN5W5EPHWJQ7QWX/
Modified Analysis by NIST 4/18/2022 11:58:28 PM
Action
Type
Old Value
New Value
Added
CPE Configuration
OR
*cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
Changed
Reference Type
https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html No Types Assigned
https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html Mailing List, Third Party Advisory
CVE Modified by MITRE 6/22/2021 10:15:10 PM
Action
Type
Old Value
New Value
Added
Reference
https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html [No Types Assigned]
Modified Analysis by NIST 6/02/2021 2:45:31 PM
Action
Type
Old Value
New Value
Changed
CPE Configuration
OR
*cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
*cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
OR
*cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
*cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
*cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
Changed
Reference Type
https://lists.fedoraproject.org/archives/list/[email protected] /message/XZASHZVCOFJ4VU2I3BN5W5EPHWJQ7QWX/ No Types Assigned
https://lists.fedoraproject.org/archives/list/[email protected] /message/XZASHZVCOFJ4VU2I3BN5W5EPHWJQ7QWX/ Mailing List, Third Party Advisory
CVE Modified by MITRE 4/28/2021 10:15:08 PM
Action
Type
Old Value
New Value
Added
Reference
https://lists.fedoraproject.org/archives/list/[email protected] /message/XZASHZVCOFJ4VU2I3BN5W5EPHWJQ7QWX/ [No Types Assigned]
Modified Analysis by NIST 4/27/2021 10:04:30 AM
Action
Type
Old Value
New Value
Added
CPE Configuration
OR
*cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
*cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
Changed
Reference Type
https://lists.fedoraproject.org/archives/list/[email protected] /message/CUX2CA63453G34C6KYVBLJXJXEARZI2X/ No Types Assigned
https://lists.fedoraproject.org/archives/list/[email protected] /message/CUX2CA63453G34C6KYVBLJXJXEARZI2X/ Mailing List, Third Party Advisory
Changed
Reference Type
https://lists.fedoraproject.org/archives/list/[email protected] /message/PAEQ3H6HKNO6KUCGRZVYSFSAGEUX23JL/ No Types Assigned
https://lists.fedoraproject.org/archives/list/[email protected] /message/PAEQ3H6HKNO6KUCGRZVYSFSAGEUX23JL/ Mailing List, Third Party Advisory
CVE Modified by MITRE 4/27/2021 12:15:08 AM
Action
Type
Old Value
New Value
Added
Reference
https://lists.fedoraproject.org/archives/list/[email protected] /message/CUX2CA63453G34C6KYVBLJXJXEARZI2X/ [No Types Assigned]
Added
Reference
https://lists.fedoraproject.org/archives/list/[email protected] /message/PAEQ3H6HKNO6KUCGRZVYSFSAGEUX23JL/ [No Types Assigned]
Initial Analysis by NIST 4/23/2021 4:59:45 PM
Action
Type
Old Value
New Value
Added
CVSS V3.1
NIST AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Added
CVSS V2
NIST (AV:L/AC:L/Au:N/C:P/I:N/A:N)
Added
CWE
NIST CWE-125
Added
CPE Configuration
OR
*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions up to (excluding) 5.11.16
Changed
Reference Type
https://www.kernel.org No Types Assigned
https://www.kernel.org Vendor Advisory
Changed
Reference Type
https://www.openwall.com/lists/oss-security/2021/04/18/4 No Types Assigned
https://www.openwall.com/lists/oss-security/2021/04/18/4 Mailing List, Patch, Third Party Advisory
Quick Info
CVE Dictionary Entry: CVE-2021-29155 NVD
Published Date: 04/20/2021 NVD
Last Modified: 11/21/2024
Source: MITRE