In the Linux kernel 4.19.83, there is a use-after-free (read) in the debugfs_remove function in fs/debugfs/inode.c (which is used to remove a file or directory in debugfs that was previously created with a call to another debugfs function such as debugfs_create_file). NOTE: Linux kernel developers dispute this issue as not being an issue with debugfs, instead this is an issue with misuse of debugfs within blktrace
CVSS Details
- CVSS 3.1 Base Score: 8.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Dec 12, 2019 |
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade python-perfUpgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-4.14.209-160.335 | Dec 10, 2020 | Dec 12, 2019 |
| Amazon_linux | — | Upgrade kernel | Dec 19, 2020 | Dec 12, 2019 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 5, 2020 | Dec 12, 2019 |
| Debian | — | Upgrade linux | Dec 7, 2020 | Dec 12, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade kernelUpgrade python-perfUpgrade kernel-tools-libsUpgrade python3-perfUpgrade perfUpgrade kernel-develUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-source | Feb 26, 2020 | Dec 12, 2019 |
| Oracle_linux | — | Upgrade kernel | Jul 22, 2024 | Nov 29, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Dec 12, 2019 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Nov 5, 2020 | Dec 12, 2019 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade kernel-docs | Apr 24, 2020 | Dec 12, 2019 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1103-azureUpgrade linux-image-oemUpgrade linux-image-azure-lts-18.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-gcpUpgrade linux-image-4.15.0-1091-awsUpgrade linux-image-gkeUpgrade linux-image-4.15.0-129-generic-lpaeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-genericUpgrade linux-image-oracleUpgrade linux-image-4.15.0-129-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-1082-kvmUpgrade linux-image-4.15.0-1077-gkeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-129-genericUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtualUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-snapdragonUpgrade linux-image-gke-4.15Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-1062-oracleUpgrade linux-image-4.15.0-1091-gcpUpgrade linux-image-azureUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1094-snapdragonUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1077-raspi2Upgrade linux-image-aws-hwe | Jan 6, 2021 | Dec 12, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 12, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub