A flaw was found in the Linux Kernel where an attacker may be able to have an uncontrolled read to kernel-memory from within a vm guest. A race condition between connect() and close() function may allow an attacker using the AF_VSOCK protocol to gather a 4 byte information leak or possibly intercept or corrupt AF_VSOCK messages destined to other clients.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.0 Base Score: 5.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade python-perfUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64 | Apr 27, 2020 | Sep 10, 2018 |
| Amazon_linux | — | Upgrade kernel | Jan 12, 2019 | Sep 10, 2018 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Sep 10, 2018 |
| Debian | — | Upgrade linux | Apr 30, 2019 | Sep 10, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-devel | Dec 11, 2019 | Sep 10, 2018 |
| Oracle_linux | — | Upgrade kernel | Aug 15, 2019 | Jul 30, 2018 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 7, 2019 | Sep 10, 2018 |
| Suse | — | Upgrade cluster-md-kmp-defaultUpgrade kernel-devel-azureUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-source-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade kernel-azure-baseUpgrade kernel-default | Jan 18, 2019 | Sep 10, 2018 |
| Ubuntu | — | Upgrade linux-image-4.15.0-44-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-45-lowlatencyUpgrade linux-image-4.18.0-14-snapdragonUpgrade linux-image-4.18.0-1008-awsUpgrade linux-image-4.18.0-14-lowlatencyUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-44-lowlatencyUpgrade linux-image-4.15.0-45-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.18.0-1006-gcpUpgrade linux-image-4.15.0-1031-raspi2Upgrade linux-image-4.18.0-14-generic-lpaeUpgrade linux-image-4.18.0-1007-kvmUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-44-snapdragonUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1037-azureUpgrade linux-image-azureUpgrade linux-image-snapdragonUpgrade linux-image-4.18.0-14-genericUpgrade linux-image-4.15.0-1032-awsUpgrade linux-image-genericUpgrade linux-image-4.15.0-45-genericUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1033-oemUpgrade linux-image-4.15.0-44-generic-lpaeUpgrade linux-image-4.15.0-1027-gcpUpgrade linux-image-4.15.0-1029-kvmUpgrade linux-image-oemUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.18.0-1009-raspi2Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-gcpUpgrade linux-image-4.18.0-1008-azureUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gke | Feb 5, 2019 | Sep 10, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub