In the Linux kernel through 4.14.13, drivers/block/loop.c mishandles lo_release serialization, which allows attackers to cause a denial of service (__lock_acquire use-after-free) or possibly have unspecified other impact.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel-docUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64 | Apr 27, 2020 | Jan 12, 2018 |
| Amazon_linux | — | Upgrade kernel | Feb 22, 2018 | Jan 12, 2018 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Jan 12, 2018 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 12, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-toolsUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debugUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-headers | Jan 30, 2018 | Jan 12, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debugUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade kernel-headersUpgrade python-perfUpgrade kernel | Mar 16, 2018 | Jan 12, 2018 |
| Oracle_linux | — | Upgrade kernel | Nov 6, 2018 | Jan 6, 2018 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Oct 31, 2018 | Jan 12, 2018 |
| Ubuntu | — | Upgrade linux-image-4.13.0-1022-oemUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-1054-awsUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-azureUpgrade linux-image-awsUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.13.0-38-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-4.4.0-1020-kvmUpgrade linux-image-3.13.0-142-powerpc64-smpUpgrade linux-image-4.13.0-1014-azureUpgrade linux-image-snapdragonUpgrade linux-image-3.13.0-142-powerpc-e500mcUpgrade linux-image-4.4.0-1088-snapdragonUpgrade linux-image-4.13.0-1016-raspi2Upgrade linux-image-kvmUpgrade linux-image-powerpc-e500Upgrade linux-image-4.4.0-119-powerpc64-embUpgrade linux-image-4.4.0-1086-raspi2Upgrade linux-image-3.13.0-142-powerpc-e500Upgrade linux-image-lowlatencyUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-119-genericUpgrade linux-image-3.13.0-142-powerpc64-embUpgrade linux-image-3.13.0-142-powerpc-smpUpgrade linux-image-powerpc-smpUpgrade linux-image-raspi2Upgrade linux-image-3.13.0-142-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.13.0-38-genericUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-genericUpgrade linux-image-4.4.0-119-lowlatencyUpgrade linux-image-4.4.0-119-powerpc-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-4.13.0-38-lowlatencyUpgrade linux-image-3.13.0-142-genericUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-gkeUpgrade linux-image-3.13.0-142-generic-lpaeUpgrade linux-image-4.4.0-119-powerpc-e500mcUpgrade linux-image-gcpUpgrade linux-image-4.13.0-1012-gcpUpgrade linux-image-4.4.0-1016-awsUpgrade linux-image-4.4.0-119-generic-lpaeUpgrade linux-image-4.4.0-119-powerpc64-smpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-powerpc64-smp | Feb 24, 2018 | Jan 12, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 12, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub