A TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local attackers to corrupt memory or possibly have unspecified other impact because a size check is in fs/nfs/nfs4proc.c instead of fs/nfs/nfs4xdr.c, aka CID-b4487b935452.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Sep 9, 2020 |
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-4.14.198-152.320 | Oct 2, 2020 | Sep 9, 2020 |
| Amazon_linux | — | Upgrade kernel | Oct 28, 2020 | Sep 9, 2020 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Oct 20, 2020 | Sep 9, 2020 |
| Debian | — | Upgrade linux | Sep 28, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernelUpgrade perfUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade kernel-devel | Nov 3, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade perfUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-devel | Jan 20, 2021 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade kernel-headersUpgrade python-perfUpgrade kernel-develUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Nov 2, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade kernel-tools-libs-develUpgrade perfUpgrade python-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-devel | Sep 29, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Oct 13, 2020 | Sep 9, 2020 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 7, 2020 | Sep 9, 2020 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Oct 20, 2020 | Sep 9, 2020 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-default-extraUpgrade kernel-obs-buildUpgrade kernel-docs | Oct 11, 2020 | Sep 9, 2020 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1139-raspi2Upgrade linux-image-4.15.0-1077-kvmUpgrade linux-image-4.15.0-121-genericUpgrade linux-image-5.4.0-1025-oracleUpgrade linux-image-4.4.0-1078-awsUpgrade linux-image-powerpc-smpUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1019-raspiUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-raspiUpgrade linux-image-4.15.0-120-genericUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.15.0-1056-oracleUpgrade linux-image-aws-hweUpgrade linux-image-azureUpgrade linux-image-oem-osp1Upgrade linux-image-oemUpgrade linux-image-4.15.0-1099-azureUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1089-snapdragonUpgrade linux-image-gcpUpgrade linux-image-genericUpgrade linux-image-5.4.0-1026-azureUpgrade linux-image-4.4.0-1080-kvmUpgrade linux-image-4.15.0-1057-oracleUpgrade linux-image-4.4.0-1114-awsUpgrade linux-image-4.15.0-120-lowlatencyUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.6.0-1048-oemUpgrade linux-image-4.4.0-190-generic-lpaeUpgrade linux-image-5.4.0-1025-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1024-kvmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-gkeUpgrade linux-image-snapdragonUpgrade linux-image-5.4.0-1025-gcpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-48-generic-lpaeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-190-genericUpgrade linux-image-4.15.0-1098-azureUpgrade linux-image-4.4.0-190-powerpc64-embUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.15.0-1086-awsUpgrade linux-image-5.4.0-48-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-4.4.0-190-powerpc-e500mcUpgrade linux-image-4.4.0-1143-snapdragonUpgrade linux-image-4.15.0-1073-raspi2Upgrade linux-image-oracleUpgrade linux-image-4.15.0-120-generic-lpaeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.4.0-48-genericUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-powerpc64-smpUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1086-gcpUpgrade linux-image-awsUpgrade linux-image-powerpc-e500mcUpgrade linux-image-virtualUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-aws-lts-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-raspi2Upgrade linux-image-gke-4.15Upgrade linux-image-4.15.0-1085-awsUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-190-lowlatencyUpgrade linux-image-4.15.0-121-lowlatencyUpgrade linux-image-4.15.0-121-generic-lpaeUpgrade linux-image-4.4.0-190-powerpc64-smpUpgrade linux-image-4.15.0-1072-gkeUpgrade linux-image-4.4.0-190-powerpc-smpUpgrade linux-image-4.15.0-1099-oem | Sep 22, 2020 | Sep 9, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 9, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub