In the Linux kernel 4.19.83, there is a use-after-free (read) in the debugfs_remove function in fs/debugfs/inode.c (which is used to remove a file or directory in debugfs that was previously created with a call to another debugfs function such as debugfs_create_file). NOTE: Linux kernel developers dispute this issue as not being an issue with debugfs, instead this is an issue with misuse of debugfs within blktrace
CVSS Details
- CVSS 3.1 Base Score: 8.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Dec 12, 2019 |
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.209-160.335Upgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-tools-develUpgrade perfUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade python-perf | Dec 10, 2020 | Dec 12, 2019 |
| Amazon_linux | — | Upgrade kernel | Dec 19, 2020 | Dec 12, 2019 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 5, 2020 | Dec 12, 2019 |
| Debian | — | Upgrade linux | Dec 7, 2020 | Dec 12, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernelUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade perfUpgrade python3-perfUpgrade kernel-sourceUpgrade kernel-devel | Feb 26, 2020 | Dec 12, 2019 |
| Oracle_linux | — | Upgrade kernel | Jul 22, 2024 | Nov 29, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Dec 12, 2019 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Nov 5, 2020 | Dec 12, 2019 |
| Suse | — | Upgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-buildUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade kernel-default | Apr 24, 2020 | Dec 12, 2019 |
| Ubuntu | — | Upgrade linux-image-lowlatencyUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1094-snapdragonUpgrade linux-image-4.15.0-1062-oracleUpgrade linux-image-4.15.0-1091-gcpUpgrade linux-image-gke-4.15Upgrade linux-image-4.15.0-1077-raspi2Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-snapdragonUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-azureUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1103-azureUpgrade linux-image-4.15.0-1091-awsUpgrade linux-image-virtualUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1082-kvmUpgrade linux-image-4.15.0-129-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-azure-lts-18.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-1077-gkeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-129-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-oemUpgrade linux-image-raspi2Upgrade linux-image-oracleUpgrade linux-image-4.15.0-129-lowlatencyUpgrade linux-image-genericUpgrade linux-image-gcp-lts-18.04 | Jan 6, 2021 | Dec 12, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 12, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub