A memory leak in the kernel_read_file function in fs/exec.c in the Linux kernel through 4.20.11 allows attackers to cause a denial of service (memory consumption) by triggering vfs_read failures.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade perfUpgrade kernel-develUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-tools-devel | Apr 27, 2020 | Feb 21, 2019 |
| Amazon_linux | — | Upgrade kernel | Apr 1, 2019 | Feb 21, 2019 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Apr 29, 2020 | Feb 21, 2019 |
| Debian | — | Upgrade linux | Apr 30, 2019 | Feb 21, 2019 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jul 21, 2020 | Feb 18, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Feb 21, 2019 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Apr 29, 2020 | Feb 21, 2019 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-default-manUpgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-baseUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-docsUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-default | Apr 1, 2019 | Feb 21, 2019 |
| Ubuntu | — | Upgrade linux-image-oracleUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.18.0-17-genericUpgrade linux-image-4.15.0-47-snapdragonUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1041-azureUpgrade linux-image-oemUpgrade linux-image-4.18.0-1012-awsUpgrade linux-image-genericUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-1029-gcpUpgrade linux-image-4.15.0-1031-kvmUpgrade linux-image-gkeUpgrade linux-image-4.18.0-1009-kvmUpgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-1033-raspi2Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-snapdragonUpgrade linux-image-kvmUpgrade linux-image-4.18.0-1008-gcpUpgrade linux-image-4.18.0-17-lowlatencyUpgrade linux-image-4.18.0-1014-azureUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1035-oemUpgrade linux-image-4.18.0-1011-raspi2Upgrade linux-image-4.18.0-17-snapdragonUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-47-generic-lpaeUpgrade linux-image-4.18.0-17-generic-lpaeUpgrade linux-image-4.15.0-47-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-47-genericUpgrade linux-image-awsUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-azureUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1035-awsUpgrade linux-image-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1010-oracle | Apr 5, 2019 | Feb 21, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 21, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub