Authentication Bypass

2022-11-1000:24:39

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

authentication bypass

kernel vulnerability

speculative code execution

0.001 Low

EPSS

Percentile

31.2%

JSON

kernel is vulnerable to authentication bypass. An attacker can hijack return instructions to achieve arbitrary speculative code execution under certain microarchitecture-dependent conditions.

CPENameOperatorVersion
kernel-rteq3.10.0__957.12.2.rt56.929.el7
kernel-rteq3.10.0__957.21.2.rt56.934.el7
kernel-rteq4.18.0__257.rt7.22.el8
kernel-rteq4.18.0__305.93.1.rt7.168.el8_4
kernel-rteq4.18.0__331.rt7.112.el8
kernel-rteq3.10.0__693.11.1.rt56.632.el7
kernel-rteq4.18.0__338.rt7.119.el8
kernel-rteq4.18.0__193.24.1.rt13.74.el8_2.dt1
kernel-rteq3.10.0__514.2.2.rt56.424.el7
kernel-rteq4.18.0__357.rt7.142.el8

Name	Operator	Version
kernel-rt	eq	3.10.0__957.12.2.rt56.929.el7
kernel-rt	eq	3.10.0__957.21.2.rt56.934.el7
kernel-rt	eq	4.18.0__257.rt7.22.el8
kernel-rt	eq	4.18.0__305.93.1.rt7.168.el8_4
kernel-rt	eq	4.18.0__331.rt7.112.el8
kernel-rt	eq	3.10.0__693.11.1.rt56.632.el7
kernel-rt	eq	4.18.0__338.rt7.119.el8
kernel-rt	eq	4.18.0__193.24.1.rt13.74.el8_2.dt1
kernel-rt	eq	3.10.0__514.2.2.rt56.424.el7
kernel-rt	eq	4.18.0__357.rt7.142.el8