In the Linux kernel through 4.14.13, drivers/block/loop.c mishandles lo_release serialization, which allows attackers to cause a denial of service (__lock_acquire use-after-free) or possibly have unspecified other impact.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-docUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-develUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headers | Apr 27, 2020 | Jan 12, 2018 |
| Amazon_linux | — | Upgrade kernel | Feb 22, 2018 | Jan 12, 2018 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Jan 12, 2018 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 12, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-headersUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debugUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-libs | Jan 30, 2018 | Jan 12, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-debug | Mar 16, 2018 | Jan 12, 2018 |
| Oracle_linux | — | Upgrade kernel | Nov 6, 2018 | Jan 6, 2018 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Oct 31, 2018 | Jan 12, 2018 |
| Ubuntu | — | Upgrade linux-image-oemUpgrade linux-image-generic-lts-trustyUpgrade linux-image-snapdragonUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-3.13.0-142-powerpc-e500mcUpgrade linux-image-4.13.0-1022-oemUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.13.0-1014-azureUpgrade linux-image-4.4.0-119-powerpc64-embUpgrade linux-image-4.4.0-1086-raspi2Upgrade linux-image-4.4.0-119-genericUpgrade linux-image-awsUpgrade linux-image-powerpc-e500mcUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-3.13.0-142-powerpc64-embUpgrade linux-image-4.13.0-1016-raspi2Upgrade linux-image-3.13.0-142-powerpc64-smpUpgrade linux-image-3.13.0-142-powerpc-e500Upgrade linux-image-4.4.0-1054-awsUpgrade linux-image-powerpc-e500Upgrade linux-image-4.13.0-38-generic-lpaeUpgrade linux-image-4.4.0-1088-snapdragonUpgrade linux-image-4.4.0-1020-kvmUpgrade linux-image-4.4.0-119-lowlatencyUpgrade linux-image-3.13.0-142-genericUpgrade linux-image-4.4.0-119-powerpc-smpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-raspi2Upgrade linux-image-3.13.0-142-powerpc-smpUpgrade linux-image-powerpc-smpUpgrade linux-image-gkeUpgrade linux-image-powerpc64-embUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-119-generic-lpaeUpgrade linux-image-4.13.0-38-genericUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-gcpUpgrade linux-image-3.13.0-142-generic-lpaeUpgrade linux-image-4.4.0-1016-awsUpgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.13.0-38-lowlatencyUpgrade linux-image-4.4.0-119-powerpc64-smpUpgrade linux-image-genericUpgrade linux-image-4.4.0-119-powerpc-e500mcUpgrade linux-image-4.13.0-1012-gcpUpgrade linux-image-3.13.0-142-lowlatency | Feb 24, 2018 | Jan 12, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 12, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub