A flaw was found in the Linux kernel's NFS41+ subsystem. NFS41+ shares mounted in different network namespaces at the same time can make bc_svc_process() use wrong back-channel IDs and cause a use-after-free vulnerability. Thus a malicious container user can cause a host kernel memory corruption and a system panic. Due to the nature of the flaw, privilege escalation cannot be fully ruled out.
CVSS Details
- CVSS 3.1 Base Score: 8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-develUpgrade python-perfUpgrade kernel-tools | Apr 27, 2020 | Dec 18, 2018 |
| Amazon_linux | — | Upgrade kernel | Jan 25, 2019 | Dec 18, 2018 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 1, 2019 | Dec 18, 2018 |
| Debian | — | Upgrade linux | Mar 28, 2019 | Dec 18, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-tools-libsUpgrade perfUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-devel | May 30, 2019 | Dec 18, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade perfUpgrade kernel-headers | May 30, 2019 | Dec 18, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf | May 1, 2019 | Dec 18, 2018 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jul 31, 2019 | Nov 27, 2018 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Dec 18, 2018 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Jul 30, 2019 | Dec 18, 2018 |
| Suse | — | Upgrade kernel-azure-baseUpgrade kernel-obs-buildUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-devel-azureUpgrade kernel-default-manUpgrade kernel-defaultUpgrade kernel-source-azure | Jan 18, 2019 | Dec 18, 2018 |
| Ubuntu | — | Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-1034-kvmUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-1040-awsUpgrade linux-image-4.4.0-145-lowlatencyUpgrade linux-image-4.4.0-145-powerpc-e500mcUpgrade linux-image-4.15.0-1036-raspi2Upgrade linux-image-4.4.0-145-powerpc-smpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-kvmUpgrade linux-image-4.15.0-1053-snapdragonUpgrade linux-image-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.4.0-145-genericUpgrade linux-image-4.4.0-1106-raspi2Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.18.0-1011-gcpUpgrade linux-image-gcpUpgrade linux-image-4.4.0-145-generic-lpaeUpgrade linux-image-4.15.0-50-genericUpgrade linux-image-oracleUpgrade linux-image-4.4.0-144-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-raspi2Upgrade linux-image-lowlatencyUpgrade linux-image-powerpc64-embUpgrade linux-image-4.15.0-1045-azureUpgrade linux-image-4.18.0-1016-awsUpgrade linux-image-4.4.0-1079-awsUpgrade linux-image-4.18.0-1018-azureUpgrade linux-image-4.18.0-1012-kvmUpgrade linux-image-4.15.0-1032-gcpUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-144-powerpc-smpUpgrade linux-image-4.4.0-144-lowlatencyUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.18.0-20-generic-lpaeUpgrade linux-image-4.15.0-1013-oracleUpgrade linux-image-4.15.0-1038-oemUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.18.0-20-snapdragonUpgrade linux-image-powerpc-smpUpgrade linux-image-4.15.0-50-lowlatencyUpgrade linux-image-4.4.0-145-powerpc64-embUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.15.0-50-generic-lpaeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-1110-snapdragonUpgrade linux-image-powerpc-e500mcUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-4.18.0-20-genericUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-144-powerpc64-embUpgrade linux-image-oemUpgrade linux-image-4.4.0-145-powerpc64-smpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.4.0-144-genericUpgrade linux-image-azureUpgrade linux-image-4.4.0-144-powerpc-e500mcUpgrade linux-image-4.4.0-1043-kvmUpgrade linux-image-4.15.0-1039-awsUpgrade linux-image-4.4.0-144-powerpc64-smpUpgrade linux-image-genericUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.18.0-20-lowlatencyUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.18.0-1014-raspi2 | Apr 9, 2019 | Dec 18, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub