In the Linux kernel before 5.2, a setxattr operation, after a mount of a crafted ext4 image, can cause a slab-out-of-bounds write access because of an ext4_xattr_set_entry use-after-free in fs/ext4/xattr.c when a large old_size value is used in a memset call, aka CID-345c0dbf3a30.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Nov 27, 2019 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.181-140.257Upgrade kernel-livepatch-4.14.177-139.253Upgrade kernelUpgrade kernel-tools-develUpgrade kernel-livepatch-4.14.173-137.229Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-livepatch-4.14.173-137.229-debuginfoUpgrade kernel-livepatch-4.14.173-137.228-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-livepatch-4.14.173-137.228Upgrade kernel-toolsUpgrade kernel-livepatch-4.14.177-139.254Upgrade kernel-tools-debuginfoUpgrade python-perfUpgrade perfUpgrade kernel-livepatch-4.14.177-139.254-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-livepatch-4.14.177-139.253-debuginfoUpgrade python-perf-debuginfo | Jun 4, 2020 | Nov 27, 2019 |
| Amazon_linux | — | Upgrade kernel | Jun 4, 2020 | Nov 27, 2019 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 5, 2020 | Nov 27, 2019 |
| Debian | — | Upgrade linux | Jun 11, 2020 | Nov 27, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-debugUpgrade perfUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-devel | Jun 17, 2020 | Nov 27, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-toolsUpgrade kernelUpgrade perfUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-headers | Apr 30, 2021 | Nov 27, 2019 |
| Oracle_linux | — | Upgrade kernel | Jul 22, 2024 | Nov 27, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Nov 27, 2019 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Nov 5, 2020 | Nov 27, 2019 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-azure-baseUpgrade kernel-docsUpgrade kernel-default-manUpgrade kernel-defaultUpgrade kernel-obs-build | Jan 15, 2020 | Nov 27, 2019 |
| Ubuntu | — | Upgrade linux-image-kvmUpgrade linux-image-4.4.0-1109-awsUpgrade linux-image-4.4.0-184-generic-lpaeUpgrade linux-image-4.4.0-184-genericUpgrade linux-image-powerpc-e500mcUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-184-powerpc-smpUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-1138-snapdragonUpgrade linux-image-powerpc64-smpUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-1073-awsUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-1075-kvmUpgrade linux-image-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-184-powerpc-e500mcUpgrade linux-image-4.4.0-184-powerpc64-smpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-184-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-184-powerpc64-embUpgrade linux-image-genericUpgrade linux-image-powerpc64-embUpgrade linux-image-powerpc-smpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-1134-raspi2Upgrade linux-image-lowlatencyUpgrade linux-image-virtual | Jun 10, 2020 | Nov 27, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 27, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub