In the Linux kernel before 5.5.8, get_raw_socket in drivers/vhost/net.c lacks validation of an sk_family field, which might allow attackers to trigger kernel stack corruption via crafted system calls.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Mar 24, 2020 |
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-livepatch-4.14.173-137.228Upgrade kernel-toolsUpgrade kernel-livepatch-4.14.171-136.231Upgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade perfUpgrade kernel-livepatch-4.14.165-131.185-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.165-133.209-debuginfoUpgrade python-perfUpgrade kernel-livepatch-4.14.165-131.185Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-livepatch-4.14.165-133.209Upgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.171-136.231-debuginfo | May 13, 2020 | Mar 24, 2020 |
| Amazon_linux | — | Upgrade kernel | Apr 24, 2020 | Mar 24, 2020 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Oct 1, 2020 | Mar 24, 2020 |
| Debian | — | Upgrade linux | Apr 30, 2020 | Mar 24, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-develUpgrade python-perfUpgrade kernel-tools | Jun 17, 2020 | Mar 24, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perfUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-headers | Sep 28, 2020 | Mar 24, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernelUpgrade perf | Jun 3, 2020 | Mar 24, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade kernel-sourceUpgrade kernel-headersUpgrade python-perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade python3-perf | May 27, 2020 | Mar 24, 2020 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Apr 9, 2020 | Mar 22, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Mar 24, 2020 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Oct 1, 2020 | Mar 24, 2020 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-default-extraUpgrade kernel-docs | Apr 24, 2020 | Mar 24, 2020 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1107-awsUpgrade linux-image-snapdragonUpgrade linux-image-5.3.0-51-generic-lpaeUpgrade linux-image-5.0.0-1050-oem-osp1Upgrade linux-image-4.4.0-1133-raspi2Upgrade linux-image-powerpc64-smpUpgrade linux-image-4.15.0-1080-oemUpgrade linux-image-4.4.0-179-powerpc64-smpUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-1082-azureUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-5.3.0-51-lowlatencyUpgrade linux-image-4.15.0-1061-raspi2Upgrade linux-image-azureUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-99-genericUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-gke-5.0Upgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-powerpc-e500mcUpgrade linux-image-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1077-snapdragonUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-1038-oracleUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.3.0-1017-awsUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-5.3.0-51-genericUpgrade linux-image-5.3.0-51-snapdragonUpgrade linux-image-virtualUpgrade linux-image-4.15.0-1059-kvmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-gcpUpgrade linux-image-4.15.0-1058-gkeUpgrade linux-image-gkeUpgrade linux-image-aws-hweUpgrade linux-image-4.4.0-179-genericUpgrade linux-image-4.15.0-99-generic-lpaeUpgrade linux-image-4.4.0-1067-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.3.0-1016-oracleUpgrade linux-image-awsUpgrade linux-image-kvmUpgrade linux-image-5.3.0-1018-gkeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-oemUpgrade linux-image-4.15.0-99-lowlatencyUpgrade linux-image-4.4.0-179-powerpc-smpUpgrade linux-image-4.4.0-1071-kvmUpgrade linux-image-gke-5.3 | Apr 29, 2020 | Mar 24, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 24, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub