In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, shiftfs_btrfs_ioctl_fd_replace() installs an fd referencing a file from the lower filesystem without taking an additional reference to that file. After the btrfs ioctl completes this fd is closed, which then puts a reference to that file, leading to a refcount underflow.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-virtualUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.3.0-22-generic-lpaeUpgrade linux-image-5.0.0-1025-gcpUpgrade linux-image-5.0.0-1025-gkeUpgrade linux-image-5.0.0-35-lowlatencyUpgrade linux-image-snapdragonUpgrade linux-image-5.0.0-1021-awsUpgrade linux-image-5.3.0-22-lowlatencyUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.0.0-1022-kvmUpgrade linux-image-5.0.0-35-genericUpgrade linux-image-raspi2Upgrade linux-image-5.3.0-1007-azureUpgrade linux-image-5.3.0-22-genericUpgrade linux-image-kvmUpgrade linux-image-5.0.0-1022-raspi2Upgrade linux-image-oracleUpgrade linux-image-5.3.0-1006-oracleUpgrade linux-image-awsUpgrade linux-image-5.3.0-1007-awsUpgrade linux-image-5.0.0-1007-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-5.3.0-22-snapdragonUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.0.0-1025-azureUpgrade linux-image-genericUpgrade linux-image-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-5.3.0-1007-kvmUpgrade linux-image-oem-osp1Upgrade linux-image-gcpUpgrade linux-image-5.3.0-1008-gcpUpgrade linux-image-gke-5.0Upgrade linux-image-5.0.0-35-generic-lpaeUpgrade linux-image-5.0.0-1027-oem-osp1Upgrade linux-image-5.3.0-1012-raspi2Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gke | Nov 14, 2019 | Nov 13, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub