A flaw was found in the Linux kernel's NFS41+ subsystem. NFS41+ shares mounted in different network namespaces at the same time can make bc_svc_process() use wrong back-channel IDs and cause a use-after-free vulnerability. Thus a malicious container user can cause a host kernel memory corruption and a system panic. Due to the nature of the flaw, privilege escalation cannot be fully ruled out.
CVSS Details
- CVSS 3.1 Base Score: 8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade python-perf | Apr 27, 2020 | Dec 18, 2018 |
| Amazon_linux | — | Upgrade kernel | Jan 25, 2019 | Dec 18, 2018 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 1, 2019 | Dec 18, 2018 |
| Debian | — | Upgrade linux | Mar 28, 2019 | Dec 18, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-develUpgrade perf | May 30, 2019 | Dec 18, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-devel | May 30, 2019 | Dec 18, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-toolsUpgrade kernelUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64 | May 1, 2019 | Dec 18, 2018 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jul 31, 2019 | Nov 27, 2018 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Dec 18, 2018 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Jul 30, 2019 | Dec 18, 2018 |
| Suse | — | Upgrade kernel-source-azureUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-azure-baseUpgrade kernel-docsUpgrade kernel-default-manUpgrade kernel-devel-azureUpgrade kernel-default-extra | Jan 18, 2019 | Dec 18, 2018 |
| Ubuntu | — | Upgrade linux-image-powerpc64-embUpgrade linux-image-raspi2Upgrade linux-image-4.18.0-20-generic-lpaeUpgrade linux-image-4.15.0-50-lowlatencyUpgrade linux-image-4.4.0-144-generic-lpaeUpgrade linux-image-4.15.0-1038-oemUpgrade linux-image-oracleUpgrade linux-image-4.4.0-144-powerpc-smpUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-144-lowlatencyUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-145-genericUpgrade linux-image-4.15.0-1032-gcpUpgrade linux-image-awsUpgrade linux-image-4.4.0-145-powerpc-smpUpgrade linux-image-4.18.0-20-snapdragonUpgrade linux-image-powerpc-smpUpgrade linux-image-4.15.0-1045-azureUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.18.0-1018-azureUpgrade linux-image-4.15.0-50-genericUpgrade linux-image-4.4.0-1040-awsUpgrade linux-image-4.4.0-145-powerpc-e500mcUpgrade linux-image-4.18.0-1012-kvmUpgrade linux-image-4.15.0-1053-snapdragonUpgrade linux-image-4.15.0-1034-kvmUpgrade linux-image-4.18.0-1011-gcpUpgrade linux-image-kvmUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-145-generic-lpaeUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.18.0-1016-awsUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-4.4.0-1106-raspi2Upgrade linux-image-4.4.0-1079-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.4.0-145-lowlatencyUpgrade linux-image-4.15.0-1013-oracleUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1036-raspi2Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-145-powerpc64-smpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1039-awsUpgrade linux-image-4.4.0-145-powerpc64-embUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.18.0-20-lowlatencyUpgrade linux-image-powerpc-e500mcUpgrade linux-image-oemUpgrade linux-image-4.4.0-144-powerpc64-smpUpgrade linux-image-4.4.0-144-powerpc-e500mcUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-144-powerpc64-embUpgrade linux-image-generic-lts-xenialUpgrade linux-image-genericUpgrade linux-image-4.18.0-20-genericUpgrade linux-image-4.15.0-50-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-4.4.0-144-genericUpgrade linux-image-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-1043-kvmUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.18.0-1014-raspi2Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.4.0-1110-snapdragonUpgrade linux-image-lowlatency-hwe-16.04 | Apr 9, 2019 | Dec 18, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub