In the Linux kernel before 5.1.6, there is a use-after-free in serial_ir_init_module() in drivers/media/rc/serial_ir.c.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Dec 3, 2019 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 5, 2020 | Dec 3, 2019 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Dec 3, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-develUpgrade kernel-sourceUpgrade bpftoolUpgrade kernelUpgrade kernel-headersUpgrade python3-perf | Feb 26, 2020 | Dec 3, 2019 |
| Oracle_linux | — | Upgrade kernel | Jul 22, 2024 | Mar 19, 2019 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Nov 5, 2020 | Dec 3, 2019 |
| Suse | — | Upgrade kernel-source-azureUpgrade kernel-azure-baseUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-devel-azureUpgrade gfs2-kmp-defaultUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-default-manUpgrade kernel-default-extraUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-default | Dec 13, 2019 | Dec 3, 2019 |
| Ubuntu | — | Upgrade linux-gke-4.15Upgrade linux-snapdragonUpgrade linux-oem-osp1Upgrade linux-awsUpgrade linux-oemUpgrade linux-azure-fipsUpgrade linux-azureUpgrade linux-hweUpgrade linux-gke-5.0Upgrade linuxUpgrade linux-raspi2Upgrade linux-aws-hweUpgrade linux-fipsUpgrade linux-aws-fipsUpgrade linux-kvmUpgrade linux-oracleUpgrade linux-gcp | Nov 19, 2024 | Dec 3, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub