CVE-2019-7308

CVE-2019-7308 describes an out-of-bounds speculation vulnerability in the Linux kernel's BPF verifier (kernel/bpf/verifier.c before version 4.20.6), impacting various Linux distributions including Canonical, openSUSE, and generic Linux kernels. This medium-severity vulnerability (CVSS 5.6) has a local attack vector with high attack complexity, allowing a low-privileged attacker to achieve high confidentiality impact through side-channel attacks. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage, indicating a low current exploitation risk.