Vulnetix
Try Vulnetix Request Demo
CVE-2021-21781 PUBLISHED

An information disclosure vulnerability exists in the ARM SIGPAGE functionality of Linux Kernel v5.4.66 and v5.4.54. The latest version (5.11-rc4) seems to still be vulnerable. A userland application can read the contents of the sigpage, which can leak kernel memory contents. An attacker can read a process’s memory at a specific offset to trigger this vulnerability. This was fixed in kernel releases: 4.14.222 4.19.177 5.4.99 5.10.17 5.11

EPSS 0.02% · 3.0th percentile

Risk Scores

EPSS Score
0.02%
3.0th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSlinux-aws4.15.0-1080.84, 4.15.0-1001.1, 4.15.0-1003.3
Ubuntu:Pro:16.04:LTSlinux-kvm4.4.0-1110.120, 4.4.0-1111.121, 4.4.0-1112.122
Ubuntu:20.04:LTSlinux-kvm5.4.0-1008.8, 5.4.0-1007.7, 5.4.0-1018.18
Ubuntu:20.04:LTSlinux-riscv-5.85.8.0-14.16~20.04.1, *, *
Ubuntu:Pro:FIPS-updates:18.04:LTSlinux-aws-fips4.15.0-2025.25, 4.15.0-2018.18, 4.15.0-2042.44
Ubuntu:18.04:LTSlinux-oracle-5.0*, *, 5.0.0-1013.18
Ubuntu:18.04:LTSlinux-hwe-edge5.0.0-16.17~18.04.1, 0, 5.0.0-20.21~18.04.1
Ubuntu:18.04:LTSlinux-gkeop-5.40, 5.4.0-1004.5, 5.4.0-1001.1
Ubuntu:20.04:LTSlinux-aws5.4.0-1035.37, 0, 5.3.0-1003.3
Ubuntu:Pro:16.04:LTSlinux-hwe4.13.0-31.34~16.04.1, *, *
Ubuntu:18.04:LTSlinux-aws-5.0*, 5.0.0-1027.30, 5.0.0-1025.28
Ubuntu:18.04:LTSlinux4.15.0-45.48, 4.15.0-132.136, 0
Ubuntu:18.04:LTSlinux-gcp-4.150, 4.15.0-1091.104, 4.15.0-1090.103
Ubuntu:20.04:LTSlinux-gkeop5.4.0-1010.11, 5.4.0-1008.9, 5.4.0-1012.13
Ubuntu:Pro:14.04:LTSlinux-azure4.15.0-1074.79~14.04.1, 4.15.0-1077.82~14.04.1, 4.15.0-1082.92~14.04.1
Ubuntu:18.04:LTSlinux-oracle-5.35.3.0-1018.20~18.04.1, 5.3.0-1013.14~18.04.1, 0
Ubuntu:18.04:LTSlinux-oem4.15.0-1013.16, 4.15.0-1004.5, 4.15.0-1006.9
Ubuntu:Pro:FIPS:18.04:LTSlinux-fips4.15.0-1011.12, 0
Ubuntu:18.04:LTSlinux-oracle-5.45.4.0-1029.31~18.04.1, 5.4.0-1030.32~18.04.1, 5.4.0-1033.35
Ubuntu:18.04:LTSlinux-raspi24.15.0-1017.18, 4.15.0-1011.12, 4.15.0-1010.11

…and 56 more

Timeline

References

Open in Interactive Console →