In the Linux kernel before 5.5.8, get_raw_socket in drivers/vhost/net.c lacks validation of an sk_family field, which might allow attackers to trigger kernel stack corruption via crafted system calls.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Mar 24, 2020 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-4.14.171-136.231Upgrade kernel-develUpgrade kernel-tools-develUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-4.14.173-137.228Upgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.165-131.185Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.165-133.209-debuginfoUpgrade kernelUpgrade python-perfUpgrade kernel-livepatch-4.14.171-136.231-debuginfoUpgrade kernel-livepatch-4.14.165-131.185-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-4.14.165-133.209 | May 13, 2020 | Mar 24, 2020 |
| Amazon_linux | — | Upgrade kernel | Apr 24, 2020 | Mar 24, 2020 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Oct 1, 2020 | Mar 24, 2020 |
| Debian | — | Upgrade linux | Apr 30, 2020 | Mar 24, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python-perfUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-debug-develUpgrade perfUpgrade kernel-debuginfo | Jun 17, 2020 | Mar 24, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-perfUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-devel | Sep 28, 2020 | Mar 24, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernel-develUpgrade kernelUpgrade perfUpgrade kernel-headersUpgrade python-perfUpgrade kernel-tools | Jun 3, 2020 | Mar 24, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade perfUpgrade kernel-sourceUpgrade kernel-develUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python-perfUpgrade python3-perf | May 27, 2020 | Mar 24, 2020 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Apr 9, 2020 | Mar 22, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Mar 24, 2020 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Oct 1, 2020 | Mar 24, 2020 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-obs-build | Apr 24, 2020 | Mar 24, 2020 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1082-azureUpgrade linux-image-4.4.0-1071-kvmUpgrade linux-image-4.4.0-179-powerpc-smpUpgrade linux-image-4.4.0-179-powerpc64-smpUpgrade linux-image-gkeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-1080-oemUpgrade linux-image-4.15.0-1061-raspi2Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-99-lowlatencyUpgrade linux-image-5.3.0-1016-oracleUpgrade linux-image-gke-5.3Upgrade linux-image-5.0.0-1050-oem-osp1Upgrade linux-image-5.3.0-1018-gkeUpgrade linux-image-4.4.0-1133-raspi2Upgrade linux-image-5.3.0-51-generic-lpaeUpgrade linux-image-4.15.0-99-generic-lpaeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-1067-awsUpgrade linux-image-kvmUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-179-genericUpgrade linux-image-4.4.0-1107-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.3.0-51-lowlatencyUpgrade linux-image-4.15.0-1058-gkeUpgrade linux-image-awsUpgrade linux-image-4.15.0-99-genericUpgrade linux-image-azureUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-oracleUpgrade linux-image-aws-hweUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-snapdragonUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-aws-lts-18.04Upgrade linux-image-oemUpgrade linux-image-4.15.0-1061-gcpUpgrade linux-image-5.3.0-51-snapdragonUpgrade linux-image-5.3.0-1020-azureUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-179-generic-lpaeUpgrade linux-image-5.0.0-1035-gkeUpgrade linux-image-4.4.0-179-lowlatencyUpgrade linux-image-5.3.0-1017-awsUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-1038-oracleUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-5.3.0-1016-kvmUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.3.0-1018-gcpUpgrade linux-image-4.15.0-1059-kvmUpgrade linux-image-powerpc-smpUpgrade linux-image-azure-edgeUpgrade linux-image-gcpUpgrade linux-image-oem-osp1Upgrade linux-image-4.4.0-179-powerpc-e500mcUpgrade linux-image-virtualUpgrade linux-image-5.3.0-1023-raspi2Upgrade linux-image-gke-4.15Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-powerpc64-embUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-179-powerpc64-embUpgrade linux-image-5.3.0-51-genericUpgrade linux-image-lowlatencyUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-raspi2Upgrade linux-image-gke-5.0Upgrade linux-image-4.15.0-1066-awsUpgrade linux-image-4.15.0-1077-snapdragonUpgrade linux-image-4.4.0-1137-snapdragonUpgrade linux-image-powerpc64-smp-lts-xenial | Apr 29, 2020 | Mar 24, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 24, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub