A pivot_root race condition in fs/namespace.c in the Linux kernel 4.4.x before 4.4.221, 4.9.x before 4.9.221, 4.14.x before 4.14.178, 4.19.x before 4.19.119, and 5.x before 5.3 allows local users to cause a denial of service (panic) by corrupting a mountpoint reference counter.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | May 4, 2020 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Jun 1, 2021 | May 4, 2020 |
| Debian | — | Upgrade linux | Jun 11, 2020 | May 4, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade python-perf | Feb 22, 2021 | May 4, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perfUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perf | Jan 20, 2021 | May 4, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade kernelUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-toolsUpgrade python-perf | Jun 3, 2020 | May 4, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade kernel-sourceUpgrade kernel-develUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perfUpgrade python-perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel | May 27, 2020 | May 4, 2020 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Sep 12, 2020 | May 4, 2020 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | May 21, 2021 | May 4, 2020 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-azure-baseUpgrade kernel-obs-build | Jun 10, 2020 | May 4, 2020 |
| Ubuntu | — | Upgrade linux-image-3.13.0-180-powerpc64-embUpgrade linux-image-4.15.0-1080-snapdragonUpgrade linux-image-5.3.0-1028-azureUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.4.0-1012-raspiUpgrade linux-image-5.3.0-1026-gcpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-3.13.0-180-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-oemUpgrade linux-image-serverUpgrade linux-image-5.4.0-1015-gcpUpgrade linux-image-gke-4.15Upgrade linux-image-5.3.0-1026-gkeUpgrade linux-image-3.13.0-180-powerpc-e500Upgrade linux-image-omapUpgrade linux-image-4.15.0-1089-azureUpgrade linux-image-4.15.0-1077-gcpUpgrade linux-image-5.3.0-59-snapdragonUpgrade linux-image-4.15.0-106-generic-lpaeUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1067-kvmUpgrade linux-image-genericUpgrade linux-image-4.15.0-1063-raspi2Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-3.13.0-180-powerpc-e500mcUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.0.0-1059-oem-osp1Upgrade linux-image-4.15.0-1087-oemUpgrade linux-image-powerpc-smpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-aws-hweUpgrade linux-image-5.4.0-1015-oracleUpgrade linux-image-azureUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-lts-trustyUpgrade linux-image-3.13.0-180-generic-lpaeUpgrade linux-image-4.4.0-184-powerpc64-smpUpgrade linux-image-5.4.0-27-genericUpgrade linux-image-5.4.0-37-lowlatencyUpgrade linux-image-5.3.0-59-lowlatencyUpgrade linux-image-4.4.0-184-generic-lpaeUpgrade linux-image-powerpc64-smpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-4.15.0-1045-oracleUpgrade linux-image-3.13.0-180-powerpc64-smpUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-3.13.0-180-genericUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-4.4.0-1075-kvmUpgrade linux-image-aws-lts-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.3.0-1023-awsUpgrade linux-image-4.4.0-184-powerpc64-embUpgrade linux-image-gke-5.0Upgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-184-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-virtualUpgrade linux-image-raspi2Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-5.4.0-1015-kvmUpgrade linux-image-4.4.0-184-powerpc-e500mcUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-oracleUpgrade linux-image-4.4.0-1073-awsUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-1073-awsUpgrade linux-image-gke-5.3Upgrade linux-image-4.15.0-106-genericUpgrade linux-image-powerpc-e500Upgrade linux-image-5.3.0-59-generic-lpaeUpgrade linux-image-4.4.0-184-powerpc-smpUpgrade linux-image-4.4.0-184-lowlatencyUpgrade linux-image-5.4.0-37-genericUpgrade linux-image-azure-edgeUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-powerpc64-embUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-gkeop-5.3Upgrade linux-image-3.13.0-180-powerpc-smpUpgrade linux-image-gcpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.0.0-1042-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-1134-raspi2Upgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1063-gkeUpgrade linux-image-5.4.0-1015-awsUpgrade linux-image-highbankUpgrade linux-image-4.4.0-1109-awsUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-5.3.0-1026-raspi2Upgrade linux-image-5.4.0-1016-azureUpgrade linux-image-oem-osp1Upgrade linux-image-5.3.0-59-genericUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.15.0-106-lowlatencyUpgrade linux-image-awsUpgrade linux-image-5.3.0-1023-kvmUpgrade linux-image-4.4.0-1138-snapdragonUpgrade linux-image-5.4.0-37-generic-lpaeUpgrade linux-image-5.3.0-1024-oracle | Jun 10, 2020 | May 4, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 4, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub