The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The cluster logical volume manager daemon (clvmd) in lvm2-cluster in LVM2 before 2.02.72, as used in Red Hat Global File System (GFS) and other products, does not verify client credentials upon a socket connection, which allows local users to cause a denial of service (daemon exit or logical-volume change) or possibly have unspecified other impact via crafted control commands.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade lvm2-cluster | Dec 1, 2016 | Aug 5, 2010 |
| Debian | — | Upgrade lvm2 | Jul 30, 2024 | Aug 5, 2010 |
| Gentoo Linux | — | Upgrade dev-db/unixODBC.Upgrade dev-php/PEAR-Mail.Upgrade net-libs/libsoup.Upgrade app-admin/syslog-ng.Upgrade games-sports/racer-bin.Upgrade dev-php/PEAR-PEAR.Upgrade media-libs/fmod.Upgrade net-misc/vino.Upgrade dev-libs/xmlsec.Upgrade media-libs/xine-lib.Upgrade x11-apps/xrdb.Upgrade media-sound/lastfmplayer.Upgrade net-misc/mrouted.Upgrade sys-cluster/resource-agents.Upgrade app-office/gnucash.Upgrade net-libs/webkit-gtk.Upgrade gnome-base/gdm.Upgrade dev-util/qt-creator.Upgrade net-analyzer/sflowtool.Upgrade dev-util/oprofile.Upgrade dev-vcs/gitolite.Upgrade net-misc/rsync.Upgrade sys-fs/lvm2.Upgrade app-misc/ca-certificates.Upgrade sys-apps/shadow. | Oct 30, 2017 | Aug 5, 2010 |
| Oracle_linux | — | Upgrade lvm2-cluster | Oct 16, 2024 | Aug 4, 2010 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 28, 2010 |
| Suse | — | Upgrade lvm2 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade clvm | Nov 8, 2024 | Aug 5, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub