A flaw was found in the Linux kernel’s implementation of MIDI, where an attacker with a local account and the permissions to issue ioctl commands to midi devices could trigger a use-after-free issue. A write to this specific memory while freed and before use causes the flow of execution to change and possibly allow for memory corruption or privilege escalation. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Dec 11, 2020 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Jun 1, 2021 | Dec 11, 2020 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Dec 11, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade perfUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debug-develUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel | Feb 22, 2021 | Dec 11, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfoUpgrade kernel-develUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headersUpgrade perfUpgrade kernel-tools | May 25, 2022 | Dec 11, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-develUpgrade kernelUpgrade kernel-tools-libs | Mar 24, 2021 | Dec 11, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade kernel-sourceUpgrade perfUpgrade kernel-develUpgrade python3-perf | Feb 2, 2021 | Dec 11, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Jan 5, 2021 | Dec 11, 2020 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Feb 4, 2021 | Dec 2, 2020 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | May 21, 2021 | Dec 11, 2020 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-obs-build | Jan 13, 2021 | Dec 11, 2020 |
| Ubuntu | — | Upgrade linux-gke-5.3Upgrade linux-azure-fde-5.15Upgrade linuxUpgrade linux-gke-4.15Upgrade linux-awsUpgrade linux-azure-fipsUpgrade linux-oem-osp1Upgrade linux-oem-5.6Upgrade linux-lts-xenialUpgrade linux-oracleUpgrade linux-snapdragonUpgrade linux-azure-4.15Upgrade linux-kvmUpgrade linux-hweUpgrade linux-raspi2Upgrade linux-gcpUpgrade linux-riscvUpgrade linux-aws-fipsUpgrade linux-fipsUpgrade linux-hwe-5.4Upgrade linux-azureUpgrade linux-gcp-4.15Upgrade linux-raspi2-5.3Upgrade linux-gke-5.0Upgrade linux-aws-hweUpgrade linux-raspi | Nov 19, 2024 | Dec 11, 2020 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub