BPF JIT compilers in the Linux kernel through 5.11.12 have incorrect computation of branch displacements, allowing them to execute arbitrary code within the kernel context. This affects arch/x86/net/bpf_jit_comp.c and arch/x86/net/bpf_jit_comp32.c.
| Software | From | Fixed in |
|---|---|---|
| linux / linux_kernel | 3.0 | 4.4.266 |
| linux / linux_kernel | 4.5 | 4.9.266 |
| linux / linux_kernel | 4.10 | 4.14.230 |
| linux / linux_kernel | 4.15 | 4.19.186 |
| linux / linux_kernel | 4.20 | 5.4.111 |
| linux / linux_kernel | 5.5 | 5.10.29 |
| linux / linux_kernel | 5.11 | 5.11.13 |
| fedoraproject / fedora | 33 | 33.x |
| debian / debian_linux | 9.0 | 9.0.x |