An issue was discovered in the Linux kernel through 5.6.2. mpol_parse_str in mm/mempolicy.c has a stack-based out-of-bounds write because an empty nodelist is mishandled during mount option parsing, aka CID-aa9f7d5172fa. NOTE: Someone in the security community disagrees that this is a vulnerability because the issue “is a bug in parsing mount options which can only be specified by a privileged user, so triggering the bug does not grant any powers not already held.”
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Apr 6, 2020 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Jul 8, 2020 | Apr 6, 2020 |
| Debian | — | Upgrade linux | May 6, 2020 | Apr 6, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade python-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfo | Jun 17, 2020 | Apr 6, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-develUpgrade python-perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-headers | Sep 28, 2020 | Apr 6, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-develUpgrade kernelUpgrade kernel-tools-libsUpgrade python-perf | Jun 3, 2020 | Apr 6, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade kernel-sourceUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade perfUpgrade kernelUpgrade kernel-develUpgrade python3-perfUpgrade bpftool | Apr 21, 2020 | Apr 6, 2020 |
| Oracle_linux | — | Upgrade kernel | Oct 7, 2020 | Apr 1, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Apr 6, 2020 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jul 8, 2020 | Apr 6, 2020 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-raspiUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1011-gcpUpgrade linux-image-5.0.0-1037-gkeUpgrade linux-image-4.15.0-101-genericUpgrade linux-image-aws-hweUpgrade linux-image-4.4.0-1137-snapdragonUpgrade linux-image-4.4.0-179-powerpc64-smpUpgrade linux-image-5.4.0-31-lowlatencyUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.4.0-1012-azureUpgrade linux-image-kvmUpgrade linux-image-powerpc64-smpUpgrade linux-image-5.4.0-31-genericUpgrade linux-image-4.15.0-1071-gcpUpgrade linux-image-4.15.0-1067-awsUpgrade linux-image-gke-5.3Upgrade linux-image-4.4.0-1071-kvmUpgrade linux-image-oracleUpgrade linux-image-5.3.0-53-genericUpgrade linux-image-5.3.0-1025-raspi2Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-gcp-edgeUpgrade linux-image-azure-edgeUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-gke-4.15Upgrade linux-image-5.3.0-1020-gcpUpgrade linux-image-5.0.0-1052-oem-osp1Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-raspi2Upgrade linux-image-5.3.0-1019-awsUpgrade linux-image-4.15.0-1079-snapdragonUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-5.4.0-26-genericUpgrade linux-image-5.3.0-53-generic-lpaeUpgrade linux-image-5.3.0-1018-oracleUpgrade linux-image-awsUpgrade linux-image-4.4.0-179-genericUpgrade linux-image-4.4.0-179-generic-lpaeUpgrade linux-image-5.3.0-53-snapdragonUpgrade linux-image-5.4.0-1011-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-gke-5.0Upgrade linux-image-5.3.0-1020-gkeUpgrade linux-image-4.15.0-1081-oemUpgrade linux-image-4.4.0-179-powerpc-smpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-1039-oracleUpgrade linux-image-4.15.0-101-generic-lpaeUpgrade linux-image-4.4.0-1107-awsUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-101-lowlatencyUpgrade linux-image-5.3.0-1022-azureUpgrade linux-image-5.4.0-1011-oracleUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-1067-awsUpgrade linux-image-oem-osp1Upgrade linux-image-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-179-lowlatencyUpgrade linux-image-5.4.0-1011-kvmUpgrade linux-image-powerpc-e500mcUpgrade linux-image-powerpc64-embUpgrade linux-image-virtualUpgrade linux-image-5.4.0-31-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-aws-edgeUpgrade linux-image-genericUpgrade linux-image-azure-lts-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1083-azureUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.3.0-1017-kvmUpgrade linux-image-4.15.0-1059-gkeUpgrade linux-image-gkeUpgrade linux-image-5.4.0-1011-raspiUpgrade linux-image-azureUpgrade linux-image-5.3.0-53-lowlatencyUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-179-powerpc64-embUpgrade linux-image-4.15.0-1060-kvmUpgrade linux-image-aws-lts-18.04Upgrade linux-image-gkeop-5.3Upgrade linux-image-4.4.0-179-powerpc-e500mcUpgrade linux-image-4.4.0-1133-raspi2Upgrade linux-image-4.15.0-1062-raspi2Upgrade linux-image-virtual-lts-xenial | May 19, 2020 | Apr 6, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 6, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub