In the Linux kernel before 5.5.8, get_raw_socket in drivers/vhost/net.c lacks validation of an sk_family field, which might allow attackers to trigger kernel stack corruption via crafted system calls.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Mar 24, 2020 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.165-131.185Upgrade kernelUpgrade kernel-headersUpgrade kernel-livepatch-4.14.165-133.209Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.165-133.209-debuginfoUpgrade kernel-livepatch-4.14.165-131.185-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.171-136.231-debuginfoUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-livepatch-4.14.173-137.228Upgrade perfUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-livepatch-4.14.171-136.231 | May 13, 2020 | Mar 24, 2020 |
| Amazon_linux | — | Upgrade kernel | Apr 24, 2020 | Mar 24, 2020 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Oct 1, 2020 | Mar 24, 2020 |
| Debian | — | Upgrade linux | Apr 30, 2020 | Mar 24, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-headersUpgrade kernel-debug-develUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel | Jun 17, 2020 | Mar 24, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-debuginfo | Sep 28, 2020 | Mar 24, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade kernelUpgrade kernel-tools-libsUpgrade perfUpgrade python-perfUpgrade kernel-headersUpgrade kernel-tools | Jun 3, 2020 | Mar 24, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade kernel-develUpgrade python3-perfUpgrade python-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade perfUpgrade kernel-headersUpgrade kernel-source | May 27, 2020 | Mar 24, 2020 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Apr 9, 2020 | Mar 22, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Mar 24, 2020 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Oct 1, 2020 | Mar 24, 2020 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-default-extraUpgrade kernel-docs | Apr 24, 2020 | Mar 24, 2020 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1133-raspi2Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-99-genericUpgrade linux-image-4.4.0-1067-awsUpgrade linux-image-oracleUpgrade linux-image-azureUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-1058-gkeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-1061-raspi2Upgrade linux-image-4.15.0-1080-oemUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.3.0-1018-gkeUpgrade linux-image-snapdragonUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-99-lowlatencyUpgrade linux-image-awsUpgrade linux-image-4.4.0-179-powerpc-smpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.3.0-51-generic-lpaeUpgrade linux-image-4.15.0-99-generic-lpaeUpgrade linux-image-5.0.0-1050-oem-osp1Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.3.0-51-lowlatencyUpgrade linux-image-aws-hweUpgrade linux-image-kvmUpgrade linux-image-4.4.0-179-powerpc64-smpUpgrade linux-image-4.15.0-1082-azureUpgrade linux-image-gkeUpgrade linux-image-oemUpgrade linux-image-4.4.0-1107-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1077-snapdragonUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-genericUpgrade linux-image-5.3.0-1017-awsUpgrade linux-image-gke-5.0Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.0.0-1035-gkeUpgrade linux-image-raspi2Upgrade linux-image-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc64-embUpgrade linux-image-gcpUpgrade linux-image-4.4.0-179-powerpc64-embUpgrade linux-image-4.4.0-179-generic-lpaeUpgrade linux-image-5.3.0-1018-gcpUpgrade linux-image-5.3.0-1016-kvmUpgrade linux-image-5.3.0-51-snapdragonUpgrade linux-image-5.3.0-51-genericUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-4.15.0-1059-kvmUpgrade linux-image-4.4.0-1137-snapdragonUpgrade linux-image-4.4.0-179-lowlatencyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1038-oracleUpgrade linux-image-4.15.0-1066-awsUpgrade linux-image-powerpc-smpUpgrade linux-image-oem-osp1Upgrade linux-image-azure-edgeUpgrade linux-image-5.3.0-1023-raspi2Upgrade linux-image-5.3.0-1020-azureUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-179-powerpc-e500mcUpgrade linux-image-gke-4.15Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1061-gcpUpgrade linux-image-powerpc-e500mc | Apr 29, 2020 | Mar 24, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 24, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub