The Linux kernel before 5.4.2 mishandles ext4_expand_extra_isize, as demonstrated by use-after-free errors in __ext4_expand_extra_isize and ext4_xattr_set_entry, related to fs/ext4/inode.c and fs/ext4/super.c, aka CID-4ea99936a163.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Dec 12, 2019 |
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64 | May 31, 2024 | Dec 12, 2019 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Jul 8, 2020 | Dec 12, 2019 |
| Debian | — | Upgrade linux | Jan 20, 2020 | Dec 12, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-sourceUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-develUpgrade bpftoolUpgrade kernelUpgrade perfUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-tools | Jan 3, 2020 | Dec 12, 2019 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 7, 2020 | Nov 7, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Dec 12, 2019 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Jul 8, 2020 | Dec 12, 2019 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-default-extraUpgrade kernel-default | Jan 16, 2020 | Dec 12, 2019 |
| Ubuntu | — | Upgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1033-oracleUpgrade linux-image-awsUpgrade linux-image-oracle-edgeUpgrade linux-image-4.15.0-1072-snapdragonUpgrade linux-image-4.15.0-1055-raspi2Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-oracleUpgrade linux-image-aws-edgeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.3.0-1012-gcpUpgrade linux-image-5.3.0-1009-oracleUpgrade linux-image-5.3.0-1013-azureUpgrade linux-image-4.15.0-1069-azureUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1053-kvmUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-1052-gkeUpgrade linux-image-4.15.0-1060-awsUpgrade linux-image-5.0.0-1029-gkeUpgrade linux-image-5.3.0-40-genericUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.0.0-1024-awsUpgrade linux-image-gcp-edgeUpgrade linux-image-5.0.0-1029-gcpUpgrade linux-image-5.3.0-1018-raspi2Upgrade linux-image-5.0.0-1010-oracleUpgrade linux-image-gke-4.15Upgrade linux-image-4.15.0-88-genericUpgrade linux-image-5.3.0-40-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-5.3.0-40-snapdragonUpgrade linux-image-genericUpgrade linux-image-5.3.0-40-lowlatencyUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oemUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-88-lowlatencyUpgrade linux-image-azureUpgrade linux-image-gcpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.3.0-1011-awsUpgrade linux-image-lowlatencyUpgrade linux-image-azure-edgeUpgrade linux-image-4.15.0-1071-azureUpgrade linux-image-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-88-generic-lpaeUpgrade linux-image-5.3.0-1010-kvmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-gke-5.0Upgrade linux-image-4.15.0-1055-gcp | Jan 29, 2020 | Dec 12, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 12, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub