The dm_get_from_kobject function in drivers/md/dm.c in the Linux kernel before 4.14.3 allow local users to cause a denial of service (BUG) by leveraging a race condition with __dm_destroy during creation and removal of DM devices.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Feb 27, 2018 |
| Debian | — | Upgrade linux | May 2, 2018 | Feb 27, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-develUpgrade python-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-debugUpgrade kernel-debuginfo | Apr 3, 2018 | Feb 27, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade perfUpgrade kernel-debug-develUpgrade kernel-headers | May 29, 2018 | Feb 27, 2018 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Apr 19, 2018 | Nov 1, 2017 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Apr 11, 2018 | Feb 27, 2018 |
| Suse | — | Upgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-source-azureUpgrade kernel-ec2-develUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-baseUpgrade kernel-devel-azureUpgrade kernel-obs-buildUpgrade kernel-ec2-extraUpgrade dlm-kmp-defaultUpgrade kernel-ec2Upgrade kernel-docsUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-default | Apr 26, 2018 | Feb 27, 2018 |
| Ubuntu | — | Upgrade linux-image-powerpc64-embUpgrade linux-image-powerpc-e500mcUpgrade linux-image-3.13.0-149-powerpc-e500Upgrade linux-image-powerpc-e500Upgrade linux-image-powerpc64-smpUpgrade linux-image-gcpUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.13.0-43-genericUpgrade linux-image-4.13.0-43-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-3.13.0-149-generic-lpaeUpgrade linux-image-3.13.0-149-powerpc64-smpUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-raspi2Upgrade linux-image-generic-lpaeUpgrade linux-image-3.13.0-149-genericUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-awsUpgrade linux-image-4.13.0-1028-oemUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-119-powerpc64-smpUpgrade linux-image-4.4.0-119-lowlatencyUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-3.13.0-149-powerpc-smpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-azureUpgrade linux-image-powerpc-smpUpgrade linux-image-snapdragonUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.13.0-1020-raspi2Upgrade linux-image-4.13.0-1017-gcpUpgrade linux-image-4.13.0-1018-azureUpgrade linux-image-4.4.0-1020-kvmUpgrade linux-image-4.4.0-119-generic-lpaeUpgrade linux-image-4.4.0-119-genericUpgrade linux-image-4.4.0-1016-awsUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-1086-raspi2Upgrade linux-image-3.13.0-149-powerpc-e500mcUpgrade linux-image-3.13.0-149-powerpc64-embUpgrade linux-image-4.4.0-119-powerpc-e500mcUpgrade linux-image-4.4.0-119-powerpc-smpUpgrade linux-image-4.13.0-43-lowlatencyUpgrade linux-image-3.13.0-149-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1088-snapdragonUpgrade linux-image-4.4.0-119-powerpc64-embUpgrade linux-image-genericUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-1054-awsUpgrade linux-image-oem | Apr 25, 2018 | Feb 27, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 27, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub