A flaw was found in the Linux kernel’s implementation of MIDI, where an attacker with a local account and the permissions to issue ioctl commands to midi devices could trigger a use-after-free issue. A write to this specific memory while freed and before use causes the flow of execution to change and possibly allow for memory corruption or privilege escalation. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Dec 11, 2020 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Jun 1, 2021 | Dec 11, 2020 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Dec 11, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debug-develUpgrade perfUpgrade kernel-debugUpgrade kernel-toolsUpgrade kernelUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libs | Feb 22, 2021 | Dec 11, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-toolsUpgrade perfUpgrade kernel-headersUpgrade kernelUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-tools-libs | May 25, 2022 | Dec 11, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-develUpgrade kernel-headersUpgrade perfUpgrade python-perfUpgrade kernel-tools | Mar 24, 2021 | Dec 11, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade kernelUpgrade kernel-sourceUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-develUpgrade perf | Feb 2, 2021 | Dec 11, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel | Jan 5, 2021 | Dec 11, 2020 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Feb 4, 2021 | Dec 2, 2020 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | May 21, 2021 | Dec 11, 2020 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-default-extra | Jan 13, 2021 | Dec 11, 2020 |
| Ubuntu | — | Upgrade linux-aws-hweUpgrade linux-azure-4.15Upgrade linux-hweUpgrade linux-raspi2-5.3Upgrade linux-gke-5.0Upgrade linux-oracleUpgrade linux-gcp-4.15Upgrade linux-fipsUpgrade linux-hwe-5.4Upgrade linux-raspiUpgrade linux-kvmUpgrade linux-raspi2Upgrade linux-riscvUpgrade linux-aws-fipsUpgrade linux-snapdragonUpgrade linux-azureUpgrade linux-gcpUpgrade linux-oem-5.6Upgrade linux-azure-fde-5.15Upgrade linux-gke-5.3Upgrade linux-azure-fipsUpgrade linux-oem-osp1Upgrade linux-lts-xenialUpgrade linux-awsUpgrade linux-gke-4.15Upgrade linux | Nov 19, 2024 | Dec 11, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub