In the Linux kernel 5.3.11, mounting a crafted btrfs image twice can cause an rwsem_down_write_slowpath use-after-free because (in rwsem_can_spin_on_owner in kernel/locking/rwsem.c) rwsem_owner_flags returns an already freed pointer,
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Mar 10, 2021 | Nov 28, 2019 |
| Suse | — | Upgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-default-manUpgrade kernel-azure-baseUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-default | Mar 3, 2020 | Nov 28, 2019 |
| Ubuntu | — | Upgrade linux-image-4.15.0-109-lowlatencyUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-109-genericUpgrade linux-image-4.15.0-1091-azureUpgrade linux-image-aws-lts-18.04Upgrade linux-image-gcpUpgrade linux-image-4.15.0-107-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gkeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-oracleUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-oemUpgrade linux-image-4.15.0-1091-oemUpgrade linux-image-4.15.0-1081-snapdragonUpgrade linux-image-4.15.0-1046-oracleUpgrade linux-image-4.15.0-1069-kvmUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1077-awsUpgrade linux-image-kvmUpgrade linux-image-4.15.0-107-genericUpgrade linux-image-4.15.0-1048-oracleUpgrade linux-image-4.15.0-1074-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1065-raspi2Upgrade linux-image-4.15.0-107-generic-lpaeUpgrade linux-image-gke-4.15Upgrade linux-image-aws-hweUpgrade linux-image-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-4.15.0-109-generic-lpaeUpgrade linux-image-4.15.0-1064-gkeUpgrade linux-image-4.15.0-1078-gcpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-raspi2 | Aug 5, 2020 | Nov 28, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub