In the Linux kernel 5.3.11, mounting a crafted btrfs image twice can cause an rwsem_down_write_slowpath use-after-free because (in rwsem_can_spin_on_owner in kernel/locking/rwsem.c) rwsem_owner_flags returns an already freed pointer,
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Mar 10, 2021 | Nov 28, 2019 |
| Suse | — | Upgrade cluster-md-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-default-manUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade kernel-azure-baseUpgrade kernel-obs-build | Mar 3, 2020 | Nov 28, 2019 |
| Ubuntu | — | Upgrade linux-image-aws-hweUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-109-generic-lpaeUpgrade linux-image-gke-4.15Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1065-raspi2Upgrade linux-image-4.15.0-107-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-4.15.0-1074-awsUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1064-gkeUpgrade linux-image-4.15.0-1078-gcpUpgrade linux-image-4.15.0-1048-oracleUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-107-genericUpgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-virtualUpgrade linux-image-gcpUpgrade linux-image-4.15.0-107-lowlatencyUpgrade linux-image-4.15.0-1077-awsUpgrade linux-image-gkeUpgrade linux-image-4.15.0-109-lowlatencyUpgrade linux-image-aws-lts-18.04Upgrade linux-image-kvmUpgrade linux-image-azure-lts-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1081-snapdragonUpgrade linux-image-4.15.0-1069-kvmUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-oracleUpgrade linux-image-4.15.0-1091-oemUpgrade linux-image-4.15.0-1091-azureUpgrade linux-image-4.15.0-109-genericUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1046-oracleUpgrade linux-image-oem | Aug 5, 2020 | Nov 28, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub