The rbd block device driver in drivers/block/rbd.c in the Linux kernel through 5.8.9 used incomplete permission checking for access to rbd devices, which could be leveraged by local attackers to map or unmap rbd block devices, aka CID-f44d04e696fe.
CVSS Details
- CVSS 3.1 Base Score: 4.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Sep 13, 2020 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.192-147.314Upgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-livepatch-4.14.198-152.320Upgrade kernel-livepatch-4.14.193-149.317Upgrade kernel-debuginfoUpgrade kernel-livepatch-4.14.192-147.314-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-4.14.198-152.320-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.200-155.322Upgrade kernel-livepatch-4.14.193-149.317-debuginfoUpgrade python-perf-debuginfoUpgrade kernelUpgrade python-perf | Oct 28, 2020 | Sep 13, 2020 |
| Amazon_linux | — | Upgrade kernel | Oct 28, 2020 | Sep 13, 2020 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Jun 1, 2021 | Sep 13, 2020 |
| Debian | — | Upgrade linux | Sep 28, 2020 | Sep 13, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-headersUpgrade kernel-debug-develUpgrade perfUpgrade kernel-debuginfo | Nov 3, 2020 | Sep 13, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-develUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perfUpgrade perf | Jan 20, 2021 | Sep 13, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernelUpgrade kernel-toolsUpgrade kernel-develUpgrade python-perfUpgrade perf | Dec 16, 2020 | Sep 13, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade python3-perfUpgrade perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libs-develUpgrade kernel-headersUpgrade python-perf | Sep 29, 2020 | Sep 13, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | Oct 13, 2020 | Sep 13, 2020 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 7, 2020 | Sep 13, 2020 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | May 21, 2021 | Sep 13, 2020 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-obs-buildUpgrade kernel-default | Oct 2, 2020 | Sep 13, 2020 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1082-awsUpgrade linux-image-4.15.0-1100-azureUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.4.0-1023-raspiUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-5.4.0-1030-awsUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-1079-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-4.4.0-1142-raspi2Upgrade linux-image-powerpc64-embUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-197-powerpc-smpUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.6.0-1048-oemUpgrade linux-image-5.4.0-56-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-126-lowlatencyUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1059-oracleUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1091-snapdragonUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1088-gcpUpgrade linux-image-4.4.0-197-powerpc64-embUpgrade linux-image-4.4.0-1146-snapdragonUpgrade linux-image-5.4.0-1030-oracleUpgrade linux-image-5.4.0-1032-azureUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-4.4.0-197-powerpc-e500mcUpgrade linux-image-virtualUpgrade linux-image-azure-edgeUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-5.4.0-1028-kvmUpgrade linux-image-4.15.0-126-generic-lpaeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-powerpc-smpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-oem-20.04Upgrade linux-image-snapdragonUpgrade linux-image-4.4.0-1084-kvmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-4.4.0-197-genericUpgrade linux-image-gkeUpgrade linux-image-powerpc64-smpUpgrade linux-image-oemUpgrade linux-image-aws-hweUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-4.15.0-1103-oemUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gke-4.15Upgrade linux-image-raspiUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oracleUpgrade linux-image-5.4.0-1030-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-56-genericUpgrade linux-image-4.15.0-1074-gkeUpgrade linux-image-4.4.0-197-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.4.0-197-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.4.0-1118-awsUpgrade linux-image-4.15.0-1074-raspi2Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-126-genericUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-197-powerpc64-smpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-56-lowlatencyUpgrade linux-image-4.15.0-1088-aws | Dec 2, 2020 | Sep 13, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 13, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub