In the Linux kernel through 4.14.13, drivers/block/loop.c mishandles lo_release serialization, which allows attackers to cause a denial of service (__lock_acquire use-after-free) or possibly have unspecified other impact.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-toolsUpgrade kernel-docUpgrade perf-debuginfoUpgrade perfUpgrade python-perf | Apr 27, 2020 | Jan 12, 2018 |
| Amazon_linux | — | Upgrade kernel | Feb 22, 2018 | Jan 12, 2018 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Jan 12, 2018 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 12, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernelUpgrade kernel-headersUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade kernel-debugUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-debuginfo | Jan 30, 2018 | Jan 12, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-debugUpgrade perfUpgrade python-perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-debug-devel | Mar 16, 2018 | Jan 12, 2018 |
| Oracle_linux | — | Upgrade kernel | Nov 6, 2018 | Jan 6, 2018 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Oct 31, 2018 | Jan 12, 2018 |
| Ubuntu | — | Upgrade linux-image-4.4.0-119-powerpc-e500mcUpgrade linux-image-4.4.0-119-powerpc-smpUpgrade linux-image-4.4.0-119-generic-lpaeUpgrade linux-image-powerpc64-embUpgrade linux-image-gcpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-genericUpgrade linux-image-4.13.0-1012-gcpUpgrade linux-image-4.13.0-38-lowlatencyUpgrade linux-image-3.13.0-142-genericUpgrade linux-image-4.4.0-119-powerpc64-smpUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-1016-awsUpgrade linux-image-3.13.0-142-lowlatencyUpgrade linux-image-4.4.0-119-lowlatencyUpgrade linux-image-3.13.0-142-powerpc-smpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-3.13.0-142-generic-lpaeUpgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-powerpc-smpUpgrade linux-image-4.13.0-38-genericUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-azureUpgrade linux-image-4.4.0-1054-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1088-snapdragonUpgrade linux-image-3.13.0-142-powerpc64-smpUpgrade linux-image-4.13.0-1016-raspi2Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.13.0-1022-oemUpgrade linux-image-3.13.0-142-powerpc-e500mcUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc-e500Upgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-1086-raspi2Upgrade linux-image-kvmUpgrade linux-image-3.13.0-142-powerpc64-embUpgrade linux-image-4.4.0-119-powerpc64-embUpgrade linux-image-4.4.0-119-genericUpgrade linux-image-awsUpgrade linux-image-4.4.0-1020-kvmUpgrade linux-image-4.13.0-1014-azureUpgrade linux-image-snapdragonUpgrade linux-image-lowlatencyUpgrade linux-image-3.13.0-142-powerpc-e500Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.13.0-38-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-lts-trusty | Feb 24, 2018 | Jan 12, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 12, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub