In the Linux kernel 4.19.83, there is a use-after-free (read) in the debugfs_remove function in fs/debugfs/inode.c (which is used to remove a file or directory in debugfs that was previously created with a call to another debugfs function such as debugfs_create_file). NOTE: Linux kernel developers dispute this issue as not being an issue with debugfs, instead this is an issue with misuse of debugfs within blktrace
CVSS Details
- CVSS 3.1 Base Score: 8.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-kernel-tools-libs-devel | May 4, 2022 | Dec 12, 2019 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-kernelamazon-linux-ami-2-upgrade-kernel-debuginfoamazon-linux-ami-2-upgrade-kernel-debuginfo-common-aarch64amazon-linux-ami-2-upgrade-kernel-debuginfo-common-x86_64amazon-linux-ami-2-upgrade-kernel-develamazon-linux-ami-2-upgrade-kernel-headersamazon-linux-ami-2-upgrade-kernel-livepatch-4-14-209-160-335amazon-linux-ami-2-upgrade-kernel-toolsamazon-linux-ami-2-upgrade-kernel-tools-debuginfoamazon-linux-ami-2-upgrade-kernel-tools-develamazon-linux-ami-2-upgrade-perfamazon-linux-ami-2-upgrade-perf-debuginfoamazon-linux-ami-2-upgrade-python-perfamazon-linux-ami-2-upgrade-python-perf-debuginfo | Dec 10, 2020 | Dec 12, 2019 | |
| Amazon_linux | — | amazon-linux-upgrade-kernel | Dec 19, 2020 | Dec 12, 2019 |
| Centos_linux | — | centos-upgrade-kernelcentos-upgrade-kernel-rt | Nov 5, 2020 | Dec 12, 2019 |
| Debian | debian-upgrade-linux | Dec 7, 2020 | Dec 12, 2019 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-bpftoolhuawei-euleros-2_0_sp8-upgrade-kernelhuawei-euleros-2_0_sp8-upgrade-kernel-develhuawei-euleros-2_0_sp8-upgrade-kernel-headershuawei-euleros-2_0_sp8-upgrade-kernel-sourcehuawei-euleros-2_0_sp8-upgrade-kernel-toolshuawei-euleros-2_0_sp8-upgrade-kernel-tools-libshuawei-euleros-2_0_sp8-upgrade-perfhuawei-euleros-2_0_sp8-upgrade-python-perfhuawei-euleros-2_0_sp8-upgrade-python3-perf | Feb 26, 2020 | Dec 12, 2019 | |
| Oracle_linux | — | oracle-linux-upgrade-kernel | Jul 22, 2024 | Nov 29, 2019 |
| Redhat Openshift | linuxrpm-upgrade-redhat-coreos | Mar 12, 2021 | Dec 12, 2019 | |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-kernelredhat-upgrade-kernel-rt | Nov 5, 2020 | Dec 12, 2019 | |
| Suse | — | suse-upgrade-cluster-md-kmp-defaultsuse-upgrade-dlm-kmp-defaultsuse-upgrade-gfs2-kmp-defaultsuse-upgrade-kernel-defaultsuse-upgrade-kernel-default-extrasuse-upgrade-kernel-docssuse-upgrade-kernel-obs-buildsuse-upgrade-ocfs2-kmp-default | Apr 24, 2020 | Dec 12, 2019 |
| Ubuntu | ubuntu-upgrade-linux-image-4-15-0-1062-oracleubuntu-upgrade-linux-image-4-15-0-1077-gkeubuntu-upgrade-linux-image-4-15-0-1077-raspi2ubuntu-upgrade-linux-image-4-15-0-1082-kvmubuntu-upgrade-linux-image-4-15-0-1091-awsubuntu-upgrade-linux-image-4-15-0-1091-gcpubuntu-upgrade-linux-image-4-15-0-1094-snapdragonubuntu-upgrade-linux-image-4-15-0-1103-azureubuntu-upgrade-linux-image-4-15-0-129-genericubuntu-upgrade-linux-image-4-15-0-129-generic-lpaeubuntu-upgrade-linux-image-4-15-0-129-lowlatencyubuntu-upgrade-linux-image-aws-hweubuntu-upgrade-linux-image-aws-lts-18-04ubuntu-upgrade-linux-image-azureubuntu-upgrade-linux-image-azure-lts-18-04ubuntu-upgrade-linux-image-gcpubuntu-upgrade-linux-image-gcp-lts-18-04ubuntu-upgrade-linux-image-genericubuntu-upgrade-linux-image-generic-hwe-16-04ubuntu-upgrade-linux-image-generic-lpaeubuntu-upgrade-linux-image-generic-lpae-hwe-16-04ubuntu-upgrade-linux-image-gkeubuntu-upgrade-linux-image-gke-4-15ubuntu-upgrade-linux-image-kvmubuntu-upgrade-linux-image-lowlatencyubuntu-upgrade-linux-image-lowlatency-hwe-16-04ubuntu-upgrade-linux-image-oemubuntu-upgrade-linux-image-oracleubuntu-upgrade-linux-image-oracle-lts-18-04ubuntu-upgrade-linux-image-raspi2ubuntu-upgrade-linux-image-snapdragonubuntu-upgrade-linux-image-virtualubuntu-upgrade-linux-image-virtual-hwe-16-04 | Jan 6, 2021 | Dec 12, 2019 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Dec 12, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub