nbd_add_socket in drivers/block/nbd.c in the Linux kernel through 5.10.12 has an ndb_queue_rq use-after-free that could be triggered by local attackers (with access to the nbd device) via an I/O request at a certain point during device setup, aka CID-b98e762e3d71.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-kernel-tools-libs-devel | May 4, 2022 | Feb 1, 2021 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-kernelamazon-linux-ami-2-upgrade-kernel-debuginfoamazon-linux-ami-2-upgrade-kernel-debuginfo-common-aarch64amazon-linux-ami-2-upgrade-kernel-debuginfo-common-x86_64amazon-linux-ami-2-upgrade-kernel-develamazon-linux-ami-2-upgrade-kernel-headersamazon-linux-ami-2-upgrade-kernel-livepatch-4-14-219-161-340amazon-linux-ami-2-upgrade-kernel-toolsamazon-linux-ami-2-upgrade-kernel-tools-debuginfoamazon-linux-ami-2-upgrade-kernel-tools-develamazon-linux-ami-2-upgrade-perfamazon-linux-ami-2-upgrade-perf-debuginfoamazon-linux-ami-2-upgrade-python-perfamazon-linux-ami-2-upgrade-python-perf-debuginfo | Feb 22, 2021 | Feb 1, 2021 | |
| Amazon_linux | — | amazon-linux-upgrade-kernel | Feb 18, 2021 | Feb 1, 2021 |
| Centos_linux | — | centos-upgrade-kernelcentos-upgrade-kernel-rt | Nov 10, 2021 | Feb 1, 2021 |
| Debian | debian-upgrade-linux | Mar 31, 2021 | Feb 1, 2021 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-bpftoolhuawei-euleros-2_0_sp8-upgrade-kernelhuawei-euleros-2_0_sp8-upgrade-kernel-develhuawei-euleros-2_0_sp8-upgrade-kernel-headershuawei-euleros-2_0_sp8-upgrade-kernel-sourcehuawei-euleros-2_0_sp8-upgrade-kernel-toolshuawei-euleros-2_0_sp8-upgrade-kernel-tools-libshuawei-euleros-2_0_sp8-upgrade-perfhuawei-euleros-2_0_sp8-upgrade-python-perfhuawei-euleros-2_0_sp8-upgrade-python3-perf | May 18, 2021 | Feb 1, 2021 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-kernelhuawei-euleros-2_0_sp9-upgrade-kernel-toolshuawei-euleros-2_0_sp9-upgrade-kernel-tools-libshuawei-euleros-2_0_sp9-upgrade-python3-perf | Jun 2, 2021 | Feb 1, 2021 | |
| Oracle_linux | — | oracle-linux-upgrade-kerneloracle-linux-upgrade-kernel-uek | Mar 9, 2021 | Jan 28, 2021 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-kernelredhat-upgrade-kernel-rt | Nov 10, 2021 | Feb 1, 2021 | |
| Suse | — | suse-upgrade-kernel-64kbsuse-upgrade-kernel-64kb-develsuse-upgrade-kernel-64kb-extrasuse-upgrade-kernel-64kb-optionalsuse-upgrade-kernel-azuresuse-upgrade-kernel-azure-basesuse-upgrade-kernel-azure-develsuse-upgrade-kernel-debugsuse-upgrade-kernel-debug-develsuse-upgrade-kernel-defaultsuse-upgrade-kernel-default-basesuse-upgrade-kernel-default-base-rebuildsuse-upgrade-kernel-default-develsuse-upgrade-kernel-default-extrasuse-upgrade-kernel-default-mansuse-upgrade-kernel-default-optionalsuse-upgrade-kernel-develsuse-upgrade-kernel-devel-azuresuse-upgrade-kernel-docssuse-upgrade-kernel-docs-htmlsuse-upgrade-kernel-kvmsmallsuse-upgrade-kernel-kvmsmall-develsuse-upgrade-kernel-macrossuse-upgrade-kernel-obs-buildsuse-upgrade-kernel-obs-qasuse-upgrade-kernel-preemptsuse-upgrade-kernel-preempt-develsuse-upgrade-kernel-preempt-extrasuse-upgrade-kernel-preempt-optionalsuse-upgrade-kernel-sourcesuse-upgrade-kernel-source-azuresuse-upgrade-kernel-source-vanillasuse-upgrade-kernel-symssuse-upgrade-kernel-syms-azuresuse-upgrade-kernel-vanilla-basesuse-upgrade-kernel-zfcpdumpsuse-upgrade-reiserfs-kmp-default | Feb 6, 2021 | Feb 1, 2021 |
| Ubuntu | ubuntu-upgrade-linux-image-4-15-0-1016-dell300xubuntu-upgrade-linux-image-4-15-0-1069-oracleubuntu-upgrade-linux-image-4-15-0-1083-raspi2ubuntu-upgrade-linux-image-4-15-0-1089-kvmubuntu-upgrade-linux-image-4-15-0-1097-gcpubuntu-upgrade-linux-image-4-15-0-1098-awsubuntu-upgrade-linux-image-4-15-0-1100-snapdragonubuntu-upgrade-linux-image-4-15-0-1112-azureubuntu-upgrade-linux-image-4-15-0-141-genericubuntu-upgrade-linux-image-4-15-0-141-generic-lpaeubuntu-upgrade-linux-image-4-15-0-141-lowlatencyubuntu-upgrade-linux-image-5-10-0-1017-oemubuntu-upgrade-linux-image-5-4-0-1013-gkeopubuntu-upgrade-linux-image-5-4-0-1033-raspiubuntu-upgrade-linux-image-5-4-0-1037-kvmubuntu-upgrade-linux-image-5-4-0-1040-gkeubuntu-upgrade-linux-image-5-4-0-1041-gcpubuntu-upgrade-linux-image-5-4-0-1042-oracleubuntu-upgrade-linux-image-5-4-0-1043-awsubuntu-upgrade-linux-image-5-4-0-1044-azureubuntu-upgrade-linux-image-5-4-0-71-genericubuntu-upgrade-linux-image-5-4-0-71-generic-lpaeubuntu-upgrade-linux-image-5-4-0-71-lowlatencyubuntu-upgrade-linux-image-5-8-0-1020-raspiubuntu-upgrade-linux-image-5-8-0-1020-raspi-nolpaeubuntu-upgrade-linux-image-5-8-0-1023-kvmubuntu-upgrade-linux-image-5-8-0-1025-oracleubuntu-upgrade-linux-image-5-8-0-1027-azureubuntu-upgrade-linux-image-5-8-0-1027-gcpubuntu-upgrade-linux-image-5-8-0-1028-awsubuntu-upgrade-linux-image-5-8-0-49-genericubuntu-upgrade-linux-image-5-8-0-49-generic-64kubuntu-upgrade-linux-image-5-8-0-49-generic-lpaeubuntu-upgrade-linux-image-5-8-0-49-lowlatencyubuntu-upgrade-linux-image-awsubuntu-upgrade-linux-image-aws-hweubuntu-upgrade-linux-image-aws-lts-18-04ubuntu-upgrade-linux-image-azureubuntu-upgrade-linux-image-azure-lts-18-04ubuntu-upgrade-linux-image-dell300xubuntu-upgrade-linux-image-gcpubuntu-upgrade-linux-image-gcp-lts-18-04ubuntu-upgrade-linux-image-genericubuntu-upgrade-linux-image-generic-64kubuntu-upgrade-linux-image-generic-64k-hwe-20-04ubuntu-upgrade-linux-image-generic-hwe-18-04ubuntu-upgrade-linux-image-generic-hwe-20-04ubuntu-upgrade-linux-image-generic-lpaeubuntu-upgrade-linux-image-generic-lpae-hwe-18-04ubuntu-upgrade-linux-image-generic-lpae-hwe-20-04ubuntu-upgrade-linux-image-gkeubuntu-upgrade-linux-image-gke-5-4ubuntu-upgrade-linux-image-gkeopubuntu-upgrade-linux-image-gkeop-5-4ubuntu-upgrade-linux-image-kvmubuntu-upgrade-linux-image-lowlatencyubuntu-upgrade-linux-image-lowlatency-hwe-18-04ubuntu-upgrade-linux-image-lowlatency-hwe-20-04ubuntu-upgrade-linux-image-oemubuntu-upgrade-linux-image-oem-20-04ubuntu-upgrade-linux-image-oem-20-04bubuntu-upgrade-linux-image-oem-osp1ubuntu-upgrade-linux-image-oracleubuntu-upgrade-linux-image-oracle-lts-18-04ubuntu-upgrade-linux-image-raspiubuntu-upgrade-linux-image-raspi-hwe-18-04ubuntu-upgrade-linux-image-raspi-nolpaeubuntu-upgrade-linux-image-raspi2ubuntu-upgrade-linux-image-snapdragonubuntu-upgrade-linux-image-snapdragon-hwe-18-04ubuntu-upgrade-linux-image-virtualubuntu-upgrade-linux-image-virtual-hwe-18-04ubuntu-upgrade-linux-image-virtual-hwe-20-04 | Mar 21, 2021 | Feb 1, 2021 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Feb 1, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub