fs/nfsd/nfs3xdr.c in the Linux kernel through 5.10.8, when there is an NFS export of a subdirectory of a filesystem, allows remote attackers to traverse to other parts of the filesystem via READDIRPLUS. NOTE: some parties argue that such a subdirectory export is not intended to prevent this attack; see also the exports(5) no_subtree_check default behavior
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade python-perfUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-4.14.219-161.340 | Feb 22, 2021 | Jan 19, 2021 |
| Amazon_linux | — | Upgrade kernel | Feb 18, 2021 | Jan 19, 2021 |
| Debian | — | Upgrade linux | Mar 9, 2021 | Jan 19, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade perfUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-toolsUpgrade python-perfUpgrade kernelUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64 | Sep 16, 2021 | Jan 19, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel | Apr 30, 2021 | Jan 19, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade kernelUpgrade kernel-develUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-toolsUpgrade perf | May 19, 2021 | Jan 19, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade perfUpgrade kernel-develUpgrade kernel-sourceUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel | May 18, 2021 | Jan 19, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | Feb 8, 2021 | Jan 19, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 19, 2021 |
| Ubuntu | — | Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gke-5.4Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-raspi2Upgrade linux-image-gcp-edgeUpgrade linux-image-gkeUpgrade linux-image-gkeopUpgrade linux-image-azure-edgeUpgrade linux-image-5.4.0-1041-azureUpgrade linux-image-oracleUpgrade linux-image-5.8.0-49-generic-lpaeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-dell300xUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-1147-raspi2Upgrade linux-image-4.15.0-137-genericUpgrade linux-image-4.4.0-204-powerpc64-smpUpgrade linux-image-oem-osp1Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-genericUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1030-raspiUpgrade linux-image-powerpc64-smpUpgrade linux-image-gcpUpgrade linux-image-5.6.0-1053-oemUpgrade linux-image-powerpc64-embUpgrade linux-image-aws-lts-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-azure-lts-18.04Upgrade linux-image-oemUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.4.0-1151-snapdragonUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-67-generic-lpaeUpgrade linux-image-4.4.0-204-powerpc-smpUpgrade linux-image-5.8.0-1028-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1066-oracleUpgrade linux-image-virtualUpgrade linux-image-4.4.0-204-genericUpgrade linux-image-5.4.0-67-lowlatencyUpgrade linux-image-5.8.0-1025-oracleUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-5.8.0-49-generic-64kUpgrade linux-image-4.15.0-1095-awsUpgrade linux-image-5.8.0-1023-kvmUpgrade linux-image-4.4.0-1087-awsUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-5.4.0-1039-awsUpgrade linux-image-4.15.0-1080-raspi2Upgrade linux-image-4.4.0-204-powerpc-e500mcUpgrade linux-image-4.15.0-137-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-5.8.0-1020-raspi-nolpaeUpgrade linux-image-4.4.0-204-lowlatencyUpgrade linux-image-5.4.0-1011-gkeopUpgrade linux-image-4.15.0-1109-azureUpgrade linux-image-4.15.0-1094-gcpUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-4.4.0-204-powerpc64-embUpgrade linux-image-5.4.0-67-genericUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.4.0-1037-gkeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-aws-hweUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-4.4.0-1089-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-5.8.0-1020-raspiUpgrade linux-image-4.15.0-1013-dell300xUpgrade linux-image-awsUpgrade linux-image-5.4.0-1034-kvmUpgrade linux-image-aws-edgeUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-raspiUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.8.0-1027-azureUpgrade linux-image-5.8.0-49-lowlatencyUpgrade linux-image-powerpc-e500mcUpgrade linux-image-5.8.0-1027-gcpUpgrade linux-image-5.4.0-1038-gcpUpgrade linux-image-5.4.0-1039-oracleUpgrade linux-image-generic-64kUpgrade linux-image-4.15.0-1086-kvmUpgrade linux-image-4.15.0-137-generic-lpaeUpgrade linux-image-5.8.0-49-genericUpgrade linux-image-4.4.0-204-generic-lpaeUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1097-snapdragonUpgrade linux-image-azureUpgrade linux-image-4.4.0-1123-awsUpgrade linux-image-raspi-nolpae | Mar 17, 2021 | Jan 19, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 19, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub