An issue was discovered in the Linux kernel through 5.6.2. mpol_parse_str in mm/mempolicy.c has a stack-based out-of-bounds write because an empty nodelist is mishandled during mount option parsing, aka CID-aa9f7d5172fa. NOTE: Someone in the security community disagrees that this is a vulnerability because the issue “is a bug in parsing mount options which can only be specified by a privileged user, so triggering the bug does not grant any powers not already held.”
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Apr 6, 2020 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Jul 8, 2020 | Apr 6, 2020 |
| Debian | — | Upgrade linux | May 6, 2020 | Apr 6, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debugUpgrade perfUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools | Jun 17, 2020 | Apr 6, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perfUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-devel | Sep 28, 2020 | Apr 6, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-headers | Jun 3, 2020 | Apr 6, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-sourceUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade perfUpgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-devel | Apr 21, 2020 | Apr 6, 2020 |
| Oracle_linux | — | Upgrade kernel | Oct 7, 2020 | Apr 1, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Apr 6, 2020 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jul 8, 2020 | Apr 6, 2020 |
| Ubuntu | — | Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-oracleUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.3.0-1020-gcpUpgrade linux-image-4.4.0-179-generic-lpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.4.0-31-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-5.3.0-1020-gkeUpgrade linux-image-4.15.0-1067-awsUpgrade linux-image-azure-edgeUpgrade linux-image-5.0.0-1037-gkeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-gke-5.3Upgrade linux-image-4.15.0-101-genericUpgrade linux-image-4.15.0-1079-snapdragonUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-5.0.0-1052-oem-osp1Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-5.4.0-1011-gcpUpgrade linux-image-gke-4.15Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.3.0-1019-awsUpgrade linux-image-gcp-edgeUpgrade linux-image-5.3.0-53-generic-lpaeUpgrade linux-image-4.4.0-1071-kvmUpgrade linux-image-4.4.0-1137-snapdragonUpgrade linux-image-5.4.0-26-genericUpgrade linux-image-4.4.0-179-powerpc64-smpUpgrade linux-image-aws-hweUpgrade linux-image-5.3.0-1025-raspi2Upgrade linux-image-5.3.0-53-genericUpgrade linux-image-5.3.0-53-snapdragonUpgrade linux-image-5.4.0-1011-awsUpgrade linux-image-5.4.0-31-genericUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-awsUpgrade linux-image-powerpc64-smpUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1012-azureUpgrade linux-image-5.3.0-1018-oracleUpgrade linux-image-raspiUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1071-gcpUpgrade linux-image-4.4.0-179-genericUpgrade linux-image-gke-5.0Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-1059-gkeUpgrade linux-image-5.4.0-1011-raspiUpgrade linux-image-5.3.0-1017-kvmUpgrade linux-image-gkeUpgrade linux-image-oemUpgrade linux-image-4.4.0-179-powerpc-e500mcUpgrade linux-image-4.15.0-101-generic-lpaeUpgrade linux-image-4.4.0-179-powerpc-smpUpgrade linux-image-5.3.0-53-lowlatencyUpgrade linux-image-genericUpgrade linux-image-4.4.0-1133-raspi2Upgrade linux-image-4.15.0-1062-raspi2Upgrade linux-image-generic-lpaeUpgrade linux-image-azure-lts-18.04Upgrade linux-image-azureUpgrade linux-image-4.15.0-1060-kvmUpgrade linux-image-oem-osp1Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1039-oracleUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.4.0-1067-awsUpgrade linux-image-4.4.0-1107-awsUpgrade linux-image-5.4.0-1011-kvmUpgrade linux-image-5.4.0-31-generic-lpaeUpgrade linux-image-aws-lts-18.04Upgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-179-powerpc64-embUpgrade linux-image-5.4.0-1011-oracleUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-snapdragonUpgrade linux-image-gkeop-5.3Upgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-1081-oemUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.3.0-1022-azureUpgrade linux-image-4.4.0-179-lowlatencyUpgrade linux-image-4.15.0-101-lowlatencyUpgrade linux-image-powerpc64-embUpgrade linux-image-4.15.0-1083-azureUpgrade linux-image-aws-edge | May 19, 2020 | Apr 6, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 6, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub