An issue was discovered in the Linux kernel through 5.6.2. mpol_parse_str in mm/mempolicy.c has a stack-based out-of-bounds write because an empty nodelist is mishandled during mount option parsing, aka CID-aa9f7d5172fa. NOTE: Someone in the security community disagrees that this is a vulnerability because the issue “is a bug in parsing mount options which can only be specified by a privileged user, so triggering the bug does not grant any powers not already held.”
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Apr 6, 2020 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Jul 8, 2020 | Apr 6, 2020 |
| Debian | — | Upgrade linux | May 6, 2020 | Apr 6, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-debug-develUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernelUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64 | Jun 17, 2020 | Apr 6, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python-perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade perf | Sep 28, 2020 | Apr 6, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-headers | Jun 3, 2020 | Apr 6, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-sourceUpgrade kernel-tools | Apr 21, 2020 | Apr 6, 2020 |
| Oracle_linux | — | Upgrade kernel | Oct 7, 2020 | Apr 1, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Apr 6, 2020 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Jul 8, 2020 | Apr 6, 2020 |
| Ubuntu | — | Upgrade linux-image-4.4.0-179-lowlatencyUpgrade linux-image-4.4.0-1067-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-aws-edgeUpgrade linux-image-powerpc64-embUpgrade linux-image-5.3.0-1022-azureUpgrade linux-image-4.15.0-1083-azureUpgrade linux-image-4.15.0-1081-oemUpgrade linux-image-5.4.0-1011-oracleUpgrade linux-image-aws-lts-18.04Upgrade linux-image-powerpc-smpUpgrade linux-image-5.4.0-31-generic-lpaeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-1039-oracleUpgrade linux-image-4.4.0-179-powerpc-e500mcUpgrade linux-image-azureUpgrade linux-image-genericUpgrade linux-image-4.15.0-1059-gkeUpgrade linux-image-4.15.0-1060-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-osp1Upgrade linux-image-gkeop-5.3Upgrade linux-image-azure-lts-18.04Upgrade linux-image-snapdragonUpgrade linux-image-4.4.0-179-powerpc-smpUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.3.0-53-lowlatencyUpgrade linux-image-4.4.0-179-powerpc64-embUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-101-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1011-raspiUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.3.0-1017-kvmUpgrade linux-image-gkeUpgrade linux-image-virtualUpgrade linux-image-4.4.0-1107-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-101-lowlatencyUpgrade linux-image-4.15.0-1062-raspi2Upgrade linux-image-5.4.0-1011-kvmUpgrade linux-image-oemUpgrade linux-image-4.4.0-1133-raspi2Upgrade linux-image-raspi2Upgrade linux-image-5.3.0-53-snapdragonUpgrade linux-image-5.4.0-1011-awsUpgrade linux-image-raspiUpgrade linux-image-5.4.0-26-genericUpgrade linux-image-5.0.0-1052-oem-osp1Upgrade linux-image-5.3.0-53-generic-lpaeUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-5.3.0-1018-oracleUpgrade linux-image-4.15.0-1079-snapdragonUpgrade linux-image-4.4.0-179-genericUpgrade linux-image-5.3.0-1019-awsUpgrade linux-image-5.3.0-1020-gcpUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-5.3.0-1025-raspi2Upgrade linux-image-4.15.0-1067-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.0.0-1037-gkeUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-gcpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-101-genericUpgrade linux-image-4.4.0-1071-kvmUpgrade linux-image-gke-5.0Upgrade linux-image-4.4.0-1137-snapdragonUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gke-4.15Upgrade linux-image-gke-5.3Upgrade linux-image-powerpc64-smpUpgrade linux-image-azure-edgeUpgrade linux-image-4.15.0-1071-gcpUpgrade linux-image-5.4.0-1011-gcpUpgrade linux-image-5.4.0-31-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1012-azureUpgrade linux-image-oracleUpgrade linux-image-4.4.0-179-powerpc64-smpUpgrade linux-image-awsUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-gcp-edgeUpgrade linux-image-aws-hweUpgrade linux-image-4.4.0-179-generic-lpaeUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.3.0-53-genericUpgrade linux-image-5.3.0-1020-gkeUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.4.0-31-generic | May 19, 2020 | Apr 6, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 6, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub