CVE-2020-8835

Linux kernel bpf verifier vulnerability

High · published April 2, 2020

CVSS v3.1
7.8
EPSS
6%
Percentile
93.3
In the wild
Unconfirmed
What it is

In the Linux kernel 5.5.0 and newer, the bpf verifier (kernel/bpf/verifier.c) did not properly restrict the register bounds for 32-bit operations, leading to out-of-bounds reads and writes in kernel memory. The vulnerability also affects the Linux 5.4 stable series, starting with v5.4.7, as the introducing commit was backported to that branch. This vulnerability was fixed in 5.6.1, 5.5.14, and 5.4.29. (issue is aka ZDI-CAN-10780)

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.06010 · 93.3th percentile
Published
2020-04-02T18:00Z
EPSS history
Timeline
  • 02 APR 18:00Z
    Linux kernel bpf verifier vulnerability
    cvelistv5