Views:

This is a general vulnerability existing in specific CPUs (with Spectre V2). To mitigate this, you can disable eBPF for unprivileged users by doing the following:

  1. Login to the Service Gateway using root or sgowner account.
  2. Run the following command: 
    sudo sysctl kernel.unprivileged_bpf_disabled=1 
  3. To verify the result, run the following command: 
    cat /proc/sys/kernel/unprivileged_bpf_disabled
  4. The result should be 1.
Keywords: Unprivileged eBPF service gateway, Unprivileged eBPF SG, Unprivileged eBPF vision one