net/sunrpc/xdr.c in the Linux kernel before 5.13.4 allows remote attackers to cause a denial of service (xdr_set_page_base slab-out-of-bounds access) by performing many NFS 4.2 READ_PLUS operations.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Aug 8, 2021 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Sep 8, 2021 | Aug 8, 2021 |
| Oracle_linux | — | Upgrade kernel | Sep 8, 2021 | Jun 13, 2021 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Sep 8, 2021 | Aug 8, 2021 |
| Rocky_linux | — | Upgrade kernel-debug-coreUpgrade kernel-debugUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-debuginfoUpgrade kernel-modulesUpgrade kernel-coreUpgrade kernel-rt-debug-develUpgrade kernel-tools-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade perf-debuginfoUpgrade kernel-rt-coreUpgrade kernel-headersUpgrade perfUpgrade kernel-debug-modulesUpgrade kernel-develUpgrade kernel-rt-debug-coreUpgrade python3-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-rt-develUpgrade kernel-cross-headersUpgrade kernel-rt-debugUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-rtUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-extraUpgrade bpftoolUpgrade kernel-rt-debug-debuginfoUpgrade python3-perf-debuginfo | May 5, 2022 | Aug 8, 2021 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.13.0-1014-oemUpgrade linux-image-azure-edgeUpgrade linux-image-5.11.0-1019-raspi-nolpaeUpgrade linux-image-5.11.0-1019-oracleUpgrade linux-image-5.11.0-1019-awsUpgrade linux-image-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.11.0-37-lowlatencyUpgrade linux-image-5.11.0-1020-gcpUpgrade linux-image-oracleUpgrade linux-image-kvmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-5.11.0-37-genericUpgrade linux-image-5.11.0-1017-kvmUpgrade linux-image-virtualUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.11.0-1017-azureUpgrade linux-image-5.11.0-37-generic-64kUpgrade linux-image-5.11.0-1019-raspiUpgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-oem-20.04Upgrade linux-image-5.11.0-37-generic-lpaeUpgrade linux-image-oem-20.04cUpgrade linux-image-azureUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-generic-64k | Sep 28, 2021 | Aug 8, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub