In the Linux kernel through 4.20.11, af_alg_release() in crypto/af_alg.c neglects to set a NULL value for a certain structure member, which leads to a use-after-free in sockfs_setattr.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-headersUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64 | Apr 27, 2020 | Feb 18, 2019 |
| Amazon_linux | — | Upgrade kernel | Mar 12, 2019 | Feb 18, 2019 |
| Centos_linux | — | Upgrade kernel | Jan 22, 2020 | Feb 18, 2019 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 18, 2019 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 21, 2020 | Feb 15, 2019 |
| Panos | — | Update PAN-OS 9.0 to the latest workaround for your deviceUpdate PAN-OS 8.0 to the latest workaround for your deviceUpdate PAN-OS 8.1 to the latest workaround for your deviceUpdate PAN-OS 7.1 to the latest workaround for your device | Jul 16, 2019 | Feb 18, 2019 |
| Redhat_linux | — | Upgrade kernel | Jan 22, 2020 | Feb 18, 2019 |
| Suse | — | Upgrade cluster-md-kmp-defaultUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-default-extraUpgrade kernel-docsUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-default | Apr 1, 2019 | Feb 18, 2019 |
| Ubuntu | — | Upgrade linux-image-raspi2Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.18.0-17-generic-lpaeUpgrade linux-image-4.15.0-47-lowlatencyUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-47-genericUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.18.0-17-snapdragonUpgrade linux-image-4.15.0-1041-azureUpgrade linux-image-snapdragonUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.18.0-17-lowlatencyUpgrade linux-image-4.18.0-1009-kvmUpgrade linux-image-gkeUpgrade linux-image-oracleUpgrade linux-image-4.18.0-1012-awsUpgrade linux-image-4.15.0-1029-gcpUpgrade linux-image-4.18.0-1011-raspi2Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.18.0-1014-azureUpgrade linux-image-4.18.0-1008-gcpUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.15.0-1031-kvmUpgrade linux-image-4.15.0-1010-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-oemUpgrade linux-image-4.15.0-1033-raspi2Upgrade linux-image-4.15.0-47-snapdragonUpgrade linux-image-4.15.0-47-generic-lpaeUpgrade linux-image-4.15.0-1035-awsUpgrade linux-image-genericUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1035-oemUpgrade linux-image-azureUpgrade linux-image-4.18.0-17-genericUpgrade linux-image-aws-hweUpgrade linux-image-gcp | Apr 5, 2019 | Feb 18, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub