A flaw was found in the Linux kernel's implementation of biovecs in versions before 5.9-rc7. A zero-length biovec request issued by the block subsystem could cause the kernel to enter an infinite loop, causing a denial of service. This flaw allows a local attacker with basic privileges to issue requests to a block device, resulting in a denial of service. The highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Oct 6, 2020 |
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade perfUpgrade kernel-tools-develUpgrade python-perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headers | Jul 4, 2022 | Oct 6, 2020 |
| Amazon_linux | — | Upgrade kernel | Jul 14, 2023 | Oct 6, 2020 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 5, 2020 | Oct 6, 2020 |
| Debian | — | Upgrade linux | Sep 28, 2020 | Sep 28, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-sourceUpgrade python3-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade bpftoolUpgrade python-perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libs | Nov 3, 2020 | Oct 6, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perf | Nov 3, 2020 | Oct 6, 2020 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Nov 23, 2022 | Sep 30, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Oct 6, 2020 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Nov 5, 2020 | Oct 6, 2020 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-default | Feb 4, 2021 | Oct 6, 2020 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1088-gcpUpgrade linux-image-5.4.0-51-genericUpgrade linux-image-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-azure-edgeUpgrade linux-image-5.4.0-1028-oracleUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-126-genericUpgrade linux-image-4.15.0-1059-oracleUpgrade linux-image-gkeUpgrade linux-image-5.4.0-1021-raspiUpgrade linux-image-4.15.0-126-lowlatencyUpgrade linux-image-5.4.0-1031-azureUpgrade linux-image-4.15.0-126-generic-lpaeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-1028-gcpUpgrade linux-image-raspi2Upgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gke-4.15Upgrade linux-image-4.15.0-1079-kvmUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1091-snapdragonUpgrade linux-image-oracleUpgrade linux-image-awsUpgrade linux-image-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1103-oemUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.6.0-1048-oemUpgrade linux-image-4.15.0-1074-raspi2Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-raspiUpgrade linux-image-azureUpgrade linux-image-5.4.0-51-generic-lpaeUpgrade linux-image-oem-osp1Upgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-1088-awsUpgrade linux-image-oemUpgrade linux-image-aws-lts-18.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-4.15.0-1100-azureUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-51-lowlatencyUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1026-kvmUpgrade linux-image-snapdragonUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.4.0-1028-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1074-gke | Dec 3, 2020 | Oct 6, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 6, 2020 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub