UBUNTU-CVE-2019-7308
kernel/bpf/verifier.c in the Linux kernel before 4.20.6 performs undesirable out-of-bounds speculation on pointer arithmetic in various cases, including cases of different branches with different state or limits to sanitize, leading to side-channel attacks.
02 / AFFECTED SOFTWARE
Affected packages
17 explicit affected versions
21 explicit affected versions
3 explicit affected versions
26 explicit affected versions
121 explicit affected versions
1 explicit affected versions
1 explicit affected versions
120 explicit affected versions
3 explicit affected versions
144 explicit affected versions
20 explicit affected versions
23 explicit affected versions
188 explicit affected versions
11 explicit affected versions
2 explicit affected versions
22 explicit affected versions
165 explicit affected versions
27 explicit affected versions
9 explicit affected versions
32 explicit affected versions
8 explicit affected versions
8 explicit affected versions
7 explicit affected versions
4 explicit affected versions
23 explicit affected versions
26 explicit affected versions
19 explicit affected versions
47 explicit affected versions
97 explicit affected versions
1 explicit affected versions
4 explicit affected versions
10 explicit affected versions
8 explicit affected versions
1 explicit affected versions
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
kernel/bpf/verifier.c in the Linux kernel before 4.20.6 performs undesirable out-of-bounds speculation on pointer arithmetic in various cases, including cases of different branches with different state or limits to sanitize, leading to side-channel attacks.
05 / REFERENCES
Further evidence
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=979d63d50c0c0f7bc537bf821e056cc9fe5abd38
- https://ubuntu.com/security/CVE-2019-7308
- https://ubuntu.com/security/notices/USN-3930-1
- https://ubuntu.com/security/notices/USN-3930-2
- https://ubuntu.com/security/notices/USN-3931-1
- https://ubuntu.com/security/notices/USN-3931-2
- https://www.cve.org/CVERecord?id=CVE-2019-7308
- https://www.openwall.com/lists/oss-security/2019/02/02/3