An issue was discovered in the Linux kernel through 5.6.2. mpol_parse_str in mm/mempolicy.c has a stack-based out-of-bounds write because an empty nodelist is mishandled during mount option parsing, aka CID-aa9f7d5172fa. NOTE: Someone in the security community disagrees that this is a vulnerability because the issue “is a bug in parsing mount options which can only be specified by a privileged user, so triggering the bug does not grant any powers not already held.”
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Apr 6, 2020 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Jul 8, 2020 | Apr 6, 2020 |
| Debian | — | Upgrade linux | May 6, 2020 | Apr 6, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-debug-devel | Jun 17, 2020 | Apr 6, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python-perf | Sep 28, 2020 | Apr 6, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-headersUpgrade kernel-develUpgrade perfUpgrade kernel-tools | Jun 3, 2020 | Apr 6, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade kernel-sourceUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-develUpgrade python3-perfUpgrade perfUpgrade kernelUpgrade bpftool | Apr 21, 2020 | Apr 6, 2020 |
| Oracle_linux | — | Upgrade kernel | Oct 7, 2020 | Apr 1, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Apr 6, 2020 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jul 8, 2020 | Apr 6, 2020 |
| Ubuntu | — | Upgrade linux-image-4.4.0-179-powerpc64-embUpgrade linux-image-gkeop-5.3Upgrade linux-image-5.4.0-1011-oracleUpgrade linux-image-powerpc64-embUpgrade linux-image-aws-edgeUpgrade linux-image-oemUpgrade linux-image-azure-lts-18.04Upgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-1059-gkeUpgrade linux-image-oem-osp1Upgrade linux-image-4.4.0-179-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-1060-kvmUpgrade linux-image-aws-lts-18.04Upgrade linux-image-powerpc-smpUpgrade linux-image-5.4.0-31-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.15.0-1062-raspi2Upgrade linux-image-4.4.0-1133-raspi2Upgrade linux-image-4.15.0-101-lowlatencyUpgrade linux-image-4.4.0-179-powerpc-e500mcUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-azureUpgrade linux-image-4.15.0-101-generic-lpaeUpgrade linux-image-5.3.0-1017-kvmUpgrade linux-image-4.15.0-1039-oracleUpgrade linux-image-5.4.0-1011-raspiUpgrade linux-image-gkeUpgrade linux-image-virtualUpgrade linux-image-lowlatencyUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.3.0-53-lowlatencyUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-179-powerpc-smpUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-1067-awsUpgrade linux-image-genericUpgrade linux-image-4.4.0-1107-awsUpgrade linux-image-4.15.0-1081-oemUpgrade linux-image-5.4.0-1011-kvmUpgrade linux-image-4.15.0-1083-azureUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.3.0-1022-azureUpgrade linux-image-raspi2Upgrade linux-image-5.3.0-1018-oracleUpgrade linux-image-5.4.0-26-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1012-azureUpgrade linux-image-awsUpgrade linux-image-4.4.0-179-generic-lpaeUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-gke-5.3Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-1067-awsUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1079-snapdragonUpgrade linux-image-5.0.0-1037-gkeUpgrade linux-image-4.4.0-179-powerpc64-smpUpgrade linux-image-gcp-edgeUpgrade linux-image-5.3.0-1019-awsUpgrade linux-image-5.4.0-31-genericUpgrade linux-image-4.15.0-1071-gcpUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-5.0.0-1052-oem-osp1Upgrade linux-image-5.3.0-53-genericUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.3.0-53-snapdragonUpgrade linux-image-azure-edgeUpgrade linux-image-5.3.0-1020-gkeUpgrade linux-image-5.3.0-1020-gcpUpgrade linux-image-powerpc64-smpUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.4.0-1011-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.15.0-101-genericUpgrade linux-image-4.4.0-1071-kvmUpgrade linux-image-aws-hweUpgrade linux-image-5.4.0-31-lowlatencyUpgrade linux-image-4.4.0-1137-snapdragonUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-gcpUpgrade linux-image-5.3.0-1025-raspi2Upgrade linux-image-gke-5.0Upgrade linux-image-4.4.0-179-genericUpgrade linux-image-5.3.0-53-generic-lpaeUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1011-gcpUpgrade linux-image-gke-4.15Upgrade linux-image-powerpc-smp-lts-xenial | May 19, 2020 | Apr 6, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 6, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub