An issue was discovered in the Linux kernel through 5.11.3. A kernel pointer leak can be used to determine the address of the iscsi_transport structure. When an iSCSI transport is registered with the iSCSI subsystem, the transport's handle is available to unprivileged users via the sysfs file system, at /sys/class/iscsi_transport/$TRANSPORT_NAME/handle. When read, the show_transport_handle function (in drivers/scsi/scsi_transport_iscsi.c) is called, which leaks the handle. This handle is actually the pointer to an iscsi_transport struct in the kernel module's global variables.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-abi-whitelistsUpgrade kernel-tools-libs-devel | May 4, 2022 | Mar 7, 2021 |
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-livepatch-4.14.219-164.354Upgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-4.14.225-168.357Upgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-4.14.219-164.354-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-4.14.219-161.340Upgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.214-160.339Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.219-161.340-debuginfoUpgrade kernel-livepatch-4.14.214-160.339-debuginfoUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-headersUpgrade kernel | Mar 22, 2021 | Mar 7, 2021 |
| Amazon_linux | — | Upgrade kernel | Mar 20, 2021 | Mar 7, 2021 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Apr 7, 2021 | Mar 7, 2021 |
| Debian | — | Upgrade linux | Mar 10, 2021 | Mar 7, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perf | Sep 16, 2021 | Mar 7, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-headersUpgrade python-perfUpgrade perf | Apr 30, 2021 | Mar 7, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-toolsUpgrade perfUpgrade python-perf | May 19, 2021 | Mar 7, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-sourceUpgrade kernel-develUpgrade perfUpgrade kernel-tools | May 18, 2021 | Mar 7, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | Jun 2, 2021 | Mar 7, 2021 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Mar 18, 2021 | Mar 5, 2021 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Apr 7, 2021 | Mar 7, 2021 |
| Suse | — | Upgrade dlm-kmp-64kbUpgrade kselftests-kmp-rt_debugUpgrade kselftests-kmp-64kbUpgrade kernel-azure-develUpgrade ocfs2-kmp-preemptUpgrade kernel-kvmsmall-develUpgrade kernel-debug-livepatch-develUpgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade kernel-default-develUpgrade kernel-rtUpgrade kernel-rt_debug-extraUpgrade kernel-default-extraUpgrade kernel-syms-rtUpgrade dlm-kmp-azureUpgrade kernel-sourceUpgrade kernel-paeUpgrade gfs2-kmp-rtUpgrade kernel-xenUpgrade kgraft-patch-4_4_180-94_121-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-rt-develUpgrade kgraft-patch-4_4_180-94_130-defaultUpgrade kernel-symsUpgrade cluster-md-kmp-defaultUpgrade kernel-preemptUpgrade kernel-debugUpgrade kernel-azure-extraUpgrade kernel-azure-livepatch-develUpgrade kernel-xen-baseUpgrade kernel-zfcpdumpUpgrade kernel-bigmemUpgrade kernel-macrosUpgrade kernel-syms-azureUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-rt_debugUpgrade kernel-64kb-develUpgrade kernel-default-base-rebuildUpgrade kgraft-patch-4_4_180-94_144-defaultUpgrade reiserfs-kmp-rt_debugUpgrade gfs2-kmp-rt_debugUpgrade ocfs2-kmp-rtUpgrade kgraft-patch-4_4_180-94_116-defaultUpgrade kernel-pae-baseUpgrade kernel-ec2Upgrade kernel-64kbUpgrade kernel-ppc64-develUpgrade kernel-xen-develUpgrade kernel-devel-rtUpgrade kernel-default-manUpgrade kernel-rt_debugUpgrade reiserfs-kmp-preemptUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-ec2-develUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-optionalUpgrade kernel-obs-qaUpgrade kernel-traceUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-preemptUpgrade kernel-develUpgrade kernel-rt_debug-develUpgrade kgraft-patch-4_4_180-94_124-defaultUpgrade kernel-ec2-baseUpgrade gfs2-kmp-preemptUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-rt-extraUpgrade dlm-kmp-rt_debugUpgrade kernel-trace-develUpgrade kernel-default-kgraftUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-preempt-develUpgrade kernel-preempt-livepatch-develUpgrade gfs2-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-trace-baseUpgrade dlm-kmp-rtUpgrade kernel-azureUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-preemptUpgrade kernel-64kb-extraUpgrade kernel-ppc64Upgrade kernel-default-baseUpgrade kernel-source-vanillaUpgrade kgraft-patch-4_4_180-94_135-defaultUpgrade ocfs2-kmp-rt_debugUpgrade cluster-md-kmp-preemptUpgrade kernel-preempt-extraUpgrade kernel-azure-baseUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kgraft-patch-4_4_180-94_127-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-bigmem-baseUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade kgraft-patch-4_4_180-94_138-defaultUpgrade kernel-preempt-optionalUpgrade kernel-docs-htmlUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-pae-develUpgrade kgraft-patch-4_4_180-94_141-defaultUpgrade kernel-ppc64-baseUpgrade kernel-debug-develUpgrade kernel-default-optionalUpgrade kselftests-kmp-rtUpgrade kernel-bigmem-develUpgrade reiserfs-kmp-64kbUpgrade kernel-vanilla-baseUpgrade kernel-default-livepatch-devel | Apr 8, 2021 | Mar 7, 2021 |
| Ubuntu | — | Upgrade linux-image-3.13.0-185-genericUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-206-powerpc-smpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.8.0-1024-oracleUpgrade linux-image-5.8.0-48-genericUpgrade linux-image-generic-lts-trustyUpgrade linux-image-kvmUpgrade linux-image-4.4.0-1124-awsUpgrade linux-image-oemUpgrade linux-image-4.15.0-1110-azureUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.4.0-206-lowlatencyUpgrade linux-image-4.15.0-1096-awsUpgrade linux-image-4.4.0-206-powerpc64-embUpgrade linux-image-5.4.0-1041-oracleUpgrade linux-image-3.13.0-185-lowlatencyUpgrade linux-image-gke-5.4Upgrade linux-image-5.4.0-70-lowlatencyUpgrade linux-image-4.4.0-206-powerpc64-smpUpgrade linux-image-5.8.0-1019-raspi-nolpaeUpgrade linux-image-5.8.0-1022-kvmUpgrade linux-image-awsUpgrade linux-image-5.6.0-1052-oemUpgrade linux-image-powerpc64-smpUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-206-generic-lpaeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gke-5.3Upgrade linux-image-5.8.0-48-generic-64kUpgrade linux-image-5.4.0-1043-azureUpgrade linux-image-4.15.0-1087-kvmUpgrade linux-image-5.3.0-1038-raspi2Upgrade linux-image-4.4.0-1090-kvmUpgrade linux-image-5.3.0-1041-gkeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.8.0-1019-raspiUpgrade linux-image-oracleUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-70-genericUpgrade linux-image-4.4.0-206-genericUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-1152-snapdragonUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-aws-hweUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1098-snapdragonUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-139-generic-lpaeUpgrade linux-image-5.4.0-1012-gkeopUpgrade linux-image-5.3.0-72-lowlatencyUpgrade linux-image-serverUpgrade linux-image-5.4.0-1032-raspiUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.3.0-72-genericUpgrade linux-image-raspiUpgrade linux-image-4.15.0-139-genericUpgrade linux-image-5.8.0-48-generic-lpaeUpgrade linux-image-5.4.0-70-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-4.4.0-1148-raspi2Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.4.0-206-powerpc-e500mcUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.8.0-1026-gcpUpgrade linux-image-gkeop-5.3Upgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1039-gkeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-gkeopUpgrade linux-image-4.15.0-139-lowlatencyUpgrade linux-image-5.8.0-1026-azureUpgrade linux-image-generic-paeUpgrade linux-image-5.4.0-1041-awsUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1081-raspi2Upgrade linux-image-oem-20.04Upgrade linux-image-azureUpgrade linux-image-gkeop-5.4Upgrade linux-image-3.13.0-185-generic-lpaeUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-1095-gcpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.8.0-1027-awsUpgrade linux-image-4.4.0-1088-awsUpgrade linux-image-5.4.0-1040-gcpUpgrade linux-image-azure-edgeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1036-kvmUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-lowlatency-paeUpgrade linux-image-powerpc64-embUpgrade linux-image-5.8.0-48-lowlatencyUpgrade linux-image-5.10.0-1019-oemUpgrade linux-image-4.15.0-1067-oracleUpgrade linux-image-virtualUpgrade linux-image-oem-osp1Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-powerpc-smpUpgrade linux-image-lowlatency-hwe-18.04 | Mar 20, 2021 | Mar 7, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 7, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub