In the Linux kernel before 4.20.5, attackers can trigger a drivers/char/ipmi/ipmi_msghandler.c use-after-free and OOPS by arranging for certain simultaneous execution of the code, as demonstrated by a "service ipmievd restart" loop.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel | Feb 12, 2021 | Feb 22, 2019 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 22, 2019 |
| Redhat_linux | — | Upgrade kernelNo solution exists | Feb 12, 2021 | Feb 22, 2019 |
| Suse | — | Upgrade kernel-source-azureUpgrade kernel-default-manUpgrade kernel-azure-baseUpgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-defaultUpgrade kernel-docsUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-obs-build | May 15, 2019 | Feb 22, 2019 |
| Ubuntu | — | Upgrade linux-image-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-4.18.0-17-snapdragonUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-azureUpgrade linux-image-4.18.0-17-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-awsUpgrade linux-image-4.18.0-1014-azureUpgrade linux-image-4.18.0-1011-raspi2Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.18.0-17-generic-lpaeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-genericUpgrade linux-image-gcpUpgrade linux-image-snapdragonUpgrade linux-image-4.18.0-1009-kvmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-4.18.0-17-genericUpgrade linux-image-4.18.0-1012-awsUpgrade linux-image-4.18.0-1008-gcp | Apr 5, 2019 | Feb 22, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 22, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub