In the Linux kernel 5.4.0-rc2, there is a use-after-free (read) in the __blk_add_trace function in kernel/trace/blktrace.c (which is used to fill out a blk_io_trace structure and place it in a per-cpu sub-buffer).
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-develUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade python-perfUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade kernel-livepatch-4.14.181-140.257Upgrade python-perf-debuginfoUpgrade kernel-headers | Jun 4, 2020 | Dec 12, 2019 |
| Amazon_linux | — | Upgrade kernel | Jun 4, 2020 | Dec 12, 2019 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Apr 29, 2020 | Dec 12, 2019 |
| Debian | — | Upgrade linux | Jun 11, 2020 | Dec 12, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-toolsUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-headersUpgrade perf | Jun 17, 2020 | Dec 12, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-toolsUpgrade perfUpgrade kernel-tools-libsUpgrade python-perf | Apr 16, 2020 | Dec 12, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernel-develUpgrade kernelUpgrade kernel-toolsUpgrade perfUpgrade python-perfUpgrade kernel-headers | Feb 24, 2020 | Dec 12, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade kernel-develUpgrade bpftoolUpgrade kernel-headersUpgrade perfUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-source | Mar 24, 2020 | Dec 12, 2019 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | May 15, 2020 | Nov 29, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Dec 12, 2019 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Apr 29, 2020 | Dec 12, 2019 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-default-extra | Mar 31, 2020 | Dec 12, 2019 |
| Ubuntu | — | Upgrade linux-image-gke-5.3Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.4.0-1136-snapdragonUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-1070-kvmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-powerpc64-smpUpgrade linux-image-raspi2Upgrade linux-image-powerpc-e500mcUpgrade linux-image-5.3.0-1017-awsUpgrade linux-image-5.3.0-1016-oracleUpgrade linux-image-5.3.0-51-lowlatencyUpgrade linux-image-4.15.0-99-lowlatencyUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-1059-kvmUpgrade linux-image-awsUpgrade linux-image-5.3.0-1018-gkeUpgrade linux-image-4.15.0-1082-azureUpgrade linux-image-4.15.0-1058-gkeUpgrade linux-image-4.4.0-178-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-1080-oemUpgrade linux-image-4.4.0-1066-awsUpgrade linux-image-powerpc64-embUpgrade linux-image-4.15.0-1066-awsUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1077-snapdragonUpgrade linux-image-virtualUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-1061-gcpUpgrade linux-image-kvmUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-gkeUpgrade linux-image-4.4.0-1132-raspi2Upgrade linux-image-aws-lts-18.04Upgrade linux-image-4.4.0-178-genericUpgrade linux-image-4.4.0-178-powerpc-smpUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-178-powerpc-e500mcUpgrade linux-image-gke-4.15Upgrade linux-image-oracleUpgrade linux-image-4.15.0-99-generic-lpaeUpgrade linux-image-oem-osp1Upgrade linux-image-5.3.0-1020-azureUpgrade linux-image-azureUpgrade linux-image-4.4.0-178-powerpc64-embUpgrade linux-image-gke-5.0Upgrade linux-image-generic-lpaeUpgrade linux-image-5.3.0-1023-raspi2Upgrade linux-image-4.15.0-1061-raspi2Upgrade linux-image-4.15.0-99-genericUpgrade linux-image-powerpc-smpUpgrade linux-image-5.3.0-1016-kvmUpgrade linux-image-4.4.0-1106-awsUpgrade linux-image-4.4.0-178-powerpc64-smpUpgrade linux-image-oemUpgrade linux-image-5.3.0-51-snapdragonUpgrade linux-image-5.0.0-1050-oem-osp1Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-5.3.0-1018-gcpUpgrade linux-image-5.3.0-51-generic-lpaeUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1038-oracleUpgrade linux-image-4.4.0-178-generic-lpaeUpgrade linux-image-azure-edgeUpgrade linux-image-5.0.0-1035-gkeUpgrade linux-image-5.3.0-51-genericUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-gcp | Apr 29, 2020 | Dec 12, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 12, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub