The Linux kernel before 5.4.2 mishandles ext4_expand_extra_isize, as demonstrated by use-after-free errors in __ext4_expand_extra_isize and ext4_xattr_set_entry, related to fs/ext4/inode.c and fs/ext4/super.c, aka CID-4ea99936a163.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-kernel-tools-libs-devel | May 4, 2022 | Dec 12, 2019 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-kernelamazon-linux-ami-2-upgrade-kernel-debuginfoamazon-linux-ami-2-upgrade-kernel-debuginfo-common-aarch64amazon-linux-ami-2-upgrade-kernel-debuginfo-common-x86_64amazon-linux-ami-2-upgrade-kernel-develamazon-linux-ami-2-upgrade-kernel-headersamazon-linux-ami-2-upgrade-kernel-toolsamazon-linux-ami-2-upgrade-kernel-tools-debuginfoamazon-linux-ami-2-upgrade-kernel-tools-develamazon-linux-ami-2-upgrade-perfamazon-linux-ami-2-upgrade-perf-debuginfoamazon-linux-ami-2-upgrade-python-perfamazon-linux-ami-2-upgrade-python-perf-debuginfo | May 31, 2024 | Dec 12, 2019 | |
| Centos_linux | — | centos-upgrade-kernelcentos-upgrade-kernel-rt | Jul 8, 2020 | Dec 12, 2019 |
| Debian | debian-upgrade-linux | Jan 20, 2020 | Dec 12, 2019 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-bpftoolhuawei-euleros-2_0_sp8-upgrade-kernelhuawei-euleros-2_0_sp8-upgrade-kernel-develhuawei-euleros-2_0_sp8-upgrade-kernel-headershuawei-euleros-2_0_sp8-upgrade-kernel-sourcehuawei-euleros-2_0_sp8-upgrade-kernel-toolshuawei-euleros-2_0_sp8-upgrade-kernel-tools-libshuawei-euleros-2_0_sp8-upgrade-perfhuawei-euleros-2_0_sp8-upgrade-python-perfhuawei-euleros-2_0_sp8-upgrade-python3-perf | Jan 3, 2020 | Dec 12, 2019 | |
| Oracle_linux | — | oracle-linux-upgrade-kerneloracle-linux-upgrade-kernel-uek | Oct 7, 2020 | Nov 7, 2019 |
| Redhat Openshift | linuxrpm-upgrade-redhat-coreos | Mar 12, 2021 | Dec 12, 2019 | |
| Redhat_linux | redhat-upgrade-kernelredhat-upgrade-kernel-rt | Jul 8, 2020 | Dec 12, 2019 | |
| Suse | — | suse-upgrade-kernel-defaultsuse-upgrade-kernel-default-extrasuse-upgrade-kernel-docssuse-upgrade-kernel-obs-build | Jan 16, 2020 | Dec 12, 2019 |
| Ubuntu | ubuntu-upgrade-linux-image-4-15-0-1033-oracleubuntu-upgrade-linux-image-4-15-0-1052-gkeubuntu-upgrade-linux-image-4-15-0-1053-kvmubuntu-upgrade-linux-image-4-15-0-1055-gcpubuntu-upgrade-linux-image-4-15-0-1055-raspi2ubuntu-upgrade-linux-image-4-15-0-1060-awsubuntu-upgrade-linux-image-4-15-0-1069-azureubuntu-upgrade-linux-image-4-15-0-1071-azureubuntu-upgrade-linux-image-4-15-0-1072-snapdragonubuntu-upgrade-linux-image-4-15-0-88-genericubuntu-upgrade-linux-image-4-15-0-88-generic-lpaeubuntu-upgrade-linux-image-4-15-0-88-lowlatencyubuntu-upgrade-linux-image-5-0-0-1010-oracleubuntu-upgrade-linux-image-5-0-0-1024-awsubuntu-upgrade-linux-image-5-0-0-1029-gcpubuntu-upgrade-linux-image-5-0-0-1029-gkeubuntu-upgrade-linux-image-5-3-0-1009-oracleubuntu-upgrade-linux-image-5-3-0-1010-kvmubuntu-upgrade-linux-image-5-3-0-1011-awsubuntu-upgrade-linux-image-5-3-0-1012-gcpubuntu-upgrade-linux-image-5-3-0-1013-azureubuntu-upgrade-linux-image-5-3-0-1018-raspi2ubuntu-upgrade-linux-image-5-3-0-40-genericubuntu-upgrade-linux-image-5-3-0-40-generic-lpaeubuntu-upgrade-linux-image-5-3-0-40-lowlatencyubuntu-upgrade-linux-image-5-3-0-40-snapdragonubuntu-upgrade-linux-image-awsubuntu-upgrade-linux-image-aws-edgeubuntu-upgrade-linux-image-aws-hweubuntu-upgrade-linux-image-aws-lts-18-04ubuntu-upgrade-linux-image-azureubuntu-upgrade-linux-image-azure-edgeubuntu-upgrade-linux-image-gcpubuntu-upgrade-linux-image-gcp-edgeubuntu-upgrade-linux-image-genericubuntu-upgrade-linux-image-generic-hwe-16-04ubuntu-upgrade-linux-image-generic-hwe-18-04ubuntu-upgrade-linux-image-generic-lpaeubuntu-upgrade-linux-image-generic-lpae-hwe-16-04ubuntu-upgrade-linux-image-generic-lpae-hwe-18-04ubuntu-upgrade-linux-image-gkeubuntu-upgrade-linux-image-gke-4-15ubuntu-upgrade-linux-image-gke-5-0ubuntu-upgrade-linux-image-kvmubuntu-upgrade-linux-image-lowlatencyubuntu-upgrade-linux-image-lowlatency-hwe-16-04ubuntu-upgrade-linux-image-lowlatency-hwe-18-04ubuntu-upgrade-linux-image-oemubuntu-upgrade-linux-image-oracleubuntu-upgrade-linux-image-oracle-edgeubuntu-upgrade-linux-image-oracle-lts-18-04ubuntu-upgrade-linux-image-raspi2ubuntu-upgrade-linux-image-raspi2-hwe-18-04ubuntu-upgrade-linux-image-snapdragonubuntu-upgrade-linux-image-snapdragon-hwe-18-04ubuntu-upgrade-linux-image-virtualubuntu-upgrade-linux-image-virtual-hwe-16-04ubuntu-upgrade-linux-image-virtual-hwe-18-04 | Jan 29, 2020 | Dec 12, 2019 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Dec 12, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub