In the Linux kernel 5.3.11, mounting a crafted btrfs image twice can cause an rwsem_down_write_slowpath use-after-free because (in rwsem_can_spin_on_owner in kernel/locking/rwsem.c) rwsem_owner_flags returns an already freed pointer,
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Mar 10, 2021 | Nov 28, 2019 |
| Suse | — | Upgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-default-manUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-azure-baseUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-default | Mar 3, 2020 | Nov 28, 2019 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1046-oracleUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-1091-oemUpgrade linux-image-4.15.0-107-lowlatencyUpgrade linux-image-4.15.0-1081-snapdragonUpgrade linux-image-4.15.0-1091-azureUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-snapdragonUpgrade linux-image-oemUpgrade linux-image-oracleUpgrade linux-image-aws-lts-18.04Upgrade linux-image-kvmUpgrade linux-image-4.15.0-1069-kvmUpgrade linux-image-gcpUpgrade linux-image-4.15.0-109-genericUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-1077-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-109-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-gke-4.15Upgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1065-raspi2Upgrade linux-image-4.15.0-1064-gkeUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-109-generic-lpaeUpgrade linux-image-4.15.0-107-generic-lpaeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1078-gcpUpgrade linux-image-4.15.0-107-genericUpgrade linux-image-azureUpgrade linux-image-4.15.0-1048-oracleUpgrade linux-image-genericUpgrade linux-image-raspi2Upgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1074-awsUpgrade linux-image-generic-lpae | Aug 5, 2020 | Nov 28, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub