In the Linux kernel through 4.14.13, drivers/block/loop.c mishandles lo_release serialization, which allows attackers to cause a denial of service (__lock_acquire use-after-free) or possibly have unspecified other impact.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade kernel-docUpgrade python-perf | Apr 27, 2020 | Jan 12, 2018 |
| Amazon_linux | — | Upgrade kernel | Feb 22, 2018 | Jan 12, 2018 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Jan 12, 2018 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 12, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-headers | Jan 30, 2018 | Jan 12, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfoUpgrade kernel-debugUpgrade perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debug-develUpgrade python-perf | Mar 16, 2018 | Jan 12, 2018 |
| Oracle_linux | — | Upgrade kernel | Nov 6, 2018 | Jan 6, 2018 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Oct 31, 2018 | Jan 12, 2018 |
| Ubuntu | — | Upgrade linux-image-4.4.0-119-powerpc64-smpUpgrade linux-image-gcpUpgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-3.13.0-142-powerpc-smpUpgrade linux-image-gkeUpgrade linux-image-4.4.0-119-powerpc-e500mcUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-1016-awsUpgrade linux-image-3.13.0-142-genericUpgrade linux-image-4.4.0-119-powerpc-smpUpgrade linux-image-4.4.0-119-generic-lpaeUpgrade linux-image-4.4.0-119-lowlatencyUpgrade linux-image-genericUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-3.13.0-142-lowlatencyUpgrade linux-image-4.13.0-38-lowlatencyUpgrade linux-image-3.13.0-142-generic-lpaeUpgrade linux-image-powerpc64-embUpgrade linux-image-raspi2Upgrade linux-image-4.13.0-38-genericUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.13.0-1012-gcpUpgrade linux-image-powerpc-smpUpgrade linux-image-powerpc-e500Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-3.13.0-142-powerpc-e500mcUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.13.0-38-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-snapdragonUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-oemUpgrade linux-image-generic-lpaeUpgrade linux-image-4.13.0-1016-raspi2Upgrade linux-image-3.13.0-142-powerpc64-smpUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.4.0-1054-awsUpgrade linux-image-4.4.0-1088-snapdragonUpgrade linux-image-4.4.0-1086-raspi2Upgrade linux-image-4.4.0-119-powerpc64-embUpgrade linux-image-4.4.0-1020-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-3.13.0-142-powerpc-e500Upgrade linux-image-3.13.0-142-powerpc64-embUpgrade linux-image-4.4.0-119-genericUpgrade linux-image-4.13.0-1022-oemUpgrade linux-image-4.13.0-1014-azureUpgrade linux-image-powerpc-e500mcUpgrade linux-image-azureUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-powerpc64-smp-lts-xenial | Feb 24, 2018 | Jan 12, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 12, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub