A stack information leak flaw was found in s390/s390x in the Linux kernel’s memory manager functionality, where it incorrectly writes to the /proc/sys/vm/cmm_timeout file. This flaw allows a local user to see the kernel data.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Sep 10, 2020 |
| Centos_linux | — | Upgrade kernel | Nov 5, 2020 | Sep 10, 2020 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Sep 10, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-headersUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernelUpgrade kernel-debugUpgrade kernel-debug-develUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-devel | Feb 22, 2021 | Sep 10, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-develUpgrade kernelUpgrade kernel-debuginfoUpgrade perfUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libs | Jan 20, 2021 | Sep 10, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade perfUpgrade kernel-develUpgrade kernelUpgrade kernel-headersUpgrade kernel-toolsUpgrade python-perf | Feb 3, 2021 | Sep 10, 2020 |
| Oracle_linux | — | Upgrade kernel | Jul 22, 2024 | Oct 28, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Sep 10, 2020 |
| Redhat_linux | — | No solution existsUpgrade kernel | Nov 5, 2020 | Sep 10, 2020 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-default-extraUpgrade kernel-obs-build | Jul 7, 2020 | Jul 7, 2020 |
| Ubuntu | — | Upgrade linuxUpgrade linux-lts-xenialUpgrade linux-snapdragonUpgrade linux-oem-osp1Upgrade linux-hwe-edgeUpgrade linux-oemUpgrade linux-aws-hweUpgrade linux-gke-4.15Upgrade linux-awsUpgrade linux-fipsUpgrade linux-raspi2Upgrade linux-azureUpgrade linux-azure-fde-5.15Upgrade linux-oracleUpgrade linux-gcpUpgrade linux-aws-fipsUpgrade linux-azure-fipsUpgrade linux-hweUpgrade linux-kvmUpgrade linux-gke-5.0 | Nov 19, 2024 | Sep 10, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub