The Linux kernel before 5.1-rc5 allows page->_refcount reference count overflow, with resultant use-after-free issues, if about 140 GiB of RAM exists. This is related to fs/fuse/dev.c, fs/pipe.c, fs/splice.c, include/linux/mm.h, include/linux/pipe_fs_i.h, kernel/trace/trace.c, mm/gup.c, and mm/hugetlb.c. It can occur with FUSE requests.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Sep 11, 2019 | Apr 23, 2019 |
| Debian | — | Upgrade linux | Sep 16, 2019 | Apr 23, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debug-develUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-toolsUpgrade kernelUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf | Aug 2, 2019 | Apr 23, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernelUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernel-tools | Sep 25, 2019 | Apr 23, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf | Jun 27, 2019 | Apr 23, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade perfUpgrade kernel-headersUpgrade python-perfUpgrade kernel-sourceUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-devel | Mar 12, 2020 | Apr 23, 2019 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Mar 19, 2020 | Apr 22, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Apr 23, 2019 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Sep 11, 2019 | Apr 23, 2019 |
| Suse | — | Upgrade kernel-ec2-extraUpgrade kernel-obs-buildUpgrade kernel-devel-azureUpgrade kgraft-patch-3_12_61-52_146-xenUpgrade kgraft-patch-3_12_61-52_136-xenUpgrade kernel-source-azureUpgrade kgraft-patch-3_12_61-52_136-defaultUpgrade kernel-default-extraUpgrade kgraft-patch-3_12_61-52_141-defaultUpgrade kernel-default-manUpgrade kernel-ec2Upgrade kgraft-patch-3_12_61-52_141-xenUpgrade kgraft-patch-3_12_61-52_149-xenUpgrade kernel-docsUpgrade kgraft-patch-3_12_61-52_149-defaultUpgrade kernel-azure-baseUpgrade kernel-defaultUpgrade kernel-ec2-develUpgrade kgraft-patch-3_12_61-52_146-default | Jun 18, 2019 | Apr 23, 2019 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1047-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-165-genericUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.15.0-1022-oracleUpgrade linux-image-4.4.0-1123-raspi2Upgrade linux-image-5.0.0-23-generic-lpaeUpgrade linux-image-4.4.0-165-generic-lpaeUpgrade linux-image-4.15.0-60-lowlatencyUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-kvmUpgrade linux-image-4.4.0-165-powerpc-e500mcUpgrade linux-image-5.0.0-21-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.0.0-1017-snapdragonUpgrade linux-image-powerpc64-embUpgrade linux-image-powerpc-smpUpgrade linux-image-5.0.0-1012-azureUpgrade linux-image-5.0.0-23-lowlatencyUpgrade linux-image-4.15.0-60-genericUpgrade linux-image-4.15.0-1044-raspi2Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-165-powerpc64-embUpgrade linux-image-gcpUpgrade linux-image-virtualUpgrade linux-image-oracleUpgrade linux-image-4.15.0-1056-azureUpgrade linux-image-4.15.0-1043-kvmUpgrade linux-image-4.4.0-165-powerpc64-smpUpgrade linux-image-5.0.0-1013-raspi2Upgrade linux-image-5.0.0-21-generic-lpaeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-awsUpgrade linux-image-4.4.0-165-powerpc-smpUpgrade linux-image-5.0.0-1011-kvmUpgrade linux-image-4.4.0-165-lowlatencyUpgrade linux-image-5.0.0-23-genericUpgrade linux-image-oemUpgrade linux-image-snapdragonUpgrade linux-image-5.0.0-1011-awsUpgrade linux-image-4.4.0-1127-snapdragonUpgrade linux-image-4.15.0-60-generic-lpaeUpgrade linux-image-4.4.0-1095-awsUpgrade linux-image-gkeUpgrade linux-image-5.0.0-21-genericUpgrade linux-image-4.15.0-1041-gkeUpgrade linux-image-powerpc64-smpUpgrade linux-image-genericUpgrade linux-image-4.15.0-1041-gcpUpgrade linux-image-azureUpgrade linux-image-5.0.0-1011-gcpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.4.0-1059-kvmUpgrade linux-image-gke-4.15Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-aws-hwe | Jul 24, 2019 | Apr 23, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 23, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub