A flaw was found in the Linux Kernel before 5.8-rc6 in the ZRAM kernel module, where a user with a local account and the ability to read the /sys/class/zram-control/hot_add file can create ZRAM device nodes in the /dev/ directory. This read allocates kernel memory and is not accounted for a user that triggers the creation of that ZRAM device. With this vulnerability, continually reading the device may consume a large amount of system memory and cause the Out-of-Memory (OOM) killer to activate and terminate random userspace processes, possibly making the system inoperable.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade python-perfUpgrade kernel-livepatch-4.14.192-147.314Upgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64 | Aug 25, 2020 | Aug 25, 2020 |
| Debian | — | Upgrade linux | Sep 28, 2020 | Sep 16, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernelUpgrade python-perfUpgrade perfUpgrade kernel-toolsUpgrade kernel-devel | Dec 16, 2020 | Sep 16, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-sourceUpgrade kernel-develUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-headersUpgrade python-perf | Jul 31, 2020 | Jul 30, 2020 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 12, 2020 | Jun 17, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 16, 2020 |
| Suse | — | Upgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-docs | Aug 5, 2020 | Jul 31, 2020 |
| Ubuntu | — | Upgrade linux-image-raspiUpgrade linux-image-4.15.0-115-lowlatencyUpgrade linux-image-4.15.0-1051-oracleUpgrade linux-image-aws-hweUpgrade linux-image-gke-4.15Upgrade linux-image-awsUpgrade linux-image-4.15.0-1068-raspi2Upgrade linux-image-5.4.0-1023-azureUpgrade linux-image-4.15.0-1072-kvmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-1080-awsUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-1081-gcpUpgrade linux-image-snapdragonUpgrade linux-image-azureUpgrade linux-image-5.4.0-1022-awsUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1022-oracleUpgrade linux-image-4.15.0-115-generic-lpaeUpgrade linux-image-4.15.0-1094-oemUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1022-gcpUpgrade linux-image-gkeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-oemUpgrade linux-image-gke-5.4Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-45-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1067-gkeUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-115-genericUpgrade linux-image-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1016-raspiUpgrade linux-image-azure-edgeUpgrade linux-image-raspi2Upgrade linux-image-oracleUpgrade linux-image-5.4.0-45-genericUpgrade linux-image-4.15.0-1084-snapdragonUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-45-lowlatencyUpgrade linux-image-gkeop-5.4Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-aws-edgeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-virtualUpgrade linux-image-4.15.0-1093-azureUpgrade linux-image-azure-lts-18.04Upgrade linux-image-generic-hwe-16.04 | Sep 2, 2020 | Jul 31, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 16, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub