An issue was discovered in the Linux kernel through 5.6.2. mpol_parse_str in mm/mempolicy.c has a stack-based out-of-bounds write because an empty nodelist is mishandled during mount option parsing, aka CID-aa9f7d5172fa. NOTE: Someone in the security community disagrees that this is a vulnerability because the issue “is a bug in parsing mount options which can only be specified by a privileged user, so triggering the bug does not grant any powers not already held.”
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Apr 6, 2020 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Jul 8, 2020 | Apr 6, 2020 |
| Debian | — | Upgrade linux | May 6, 2020 | Apr 6, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-debug-devel | Jun 17, 2020 | Apr 6, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfoUpgrade perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools-libs | Sep 28, 2020 | Apr 6, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade kernel-toolsUpgrade perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel | Jun 3, 2020 | Apr 6, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-sourceUpgrade kernel-headersUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-develUpgrade perfUpgrade kernelUpgrade bpftool | Apr 21, 2020 | Apr 6, 2020 |
| Oracle_linux | — | Upgrade kernel | Oct 7, 2020 | Apr 1, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Apr 6, 2020 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jul 8, 2020 | Apr 6, 2020 |
| Ubuntu | — | Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-azure-edgeUpgrade linux-image-4.4.0-1071-kvmUpgrade linux-image-5.0.0-1037-gkeUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1067-awsUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-1137-snapdragonUpgrade linux-image-4.15.0-1071-gcpUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-179-genericUpgrade linux-image-5.3.0-1018-oracleUpgrade linux-image-5.4.0-31-lowlatencyUpgrade linux-image-gcp-edgeUpgrade linux-image-4.4.0-179-generic-lpaeUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-5.3.0-53-genericUpgrade linux-image-5.3.0-1025-raspi2Upgrade linux-image-gke-5.0Upgrade linux-image-raspi2Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-kvmUpgrade linux-image-5.4.0-31-genericUpgrade linux-image-5.0.0-1052-oem-osp1Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-oracleUpgrade linux-image-raspiUpgrade linux-image-5.4.0-26-genericUpgrade linux-image-5.4.0-1011-gcpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-gke-5.3Upgrade linux-image-5.3.0-53-snapdragonUpgrade linux-image-5.4.0-1012-azureUpgrade linux-image-5.3.0-1020-gkeUpgrade linux-image-4.4.0-179-powerpc64-smpUpgrade linux-image-5.4.0-1011-awsUpgrade linux-image-5.3.0-1019-awsUpgrade linux-image-5.3.0-1020-gcpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-gke-4.15Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-awsUpgrade linux-image-4.15.0-1079-snapdragonUpgrade linux-image-5.3.0-53-generic-lpaeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-powerpc-smpUpgrade linux-image-gkeop-5.3Upgrade linux-image-genericUpgrade linux-image-4.4.0-1133-raspi2Upgrade linux-image-4.4.0-179-powerpc64-embUpgrade linux-image-4.4.0-179-lowlatencyUpgrade linux-image-5.4.0-1011-kvmUpgrade linux-image-4.15.0-1039-oracleUpgrade linux-image-4.4.0-179-powerpc-smpUpgrade linux-image-snapdragonUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oemUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-101-lowlatencyUpgrade linux-image-5.3.0-1017-kvmUpgrade linux-image-4.15.0-101-generic-lpaeUpgrade linux-image-5.3.0-53-lowlatencyUpgrade linux-image-4.4.0-1107-awsUpgrade linux-image-4.4.0-1067-awsUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.4.0-179-powerpc-e500mcUpgrade linux-image-5.4.0-31-generic-lpaeUpgrade linux-image-aws-edgeUpgrade linux-image-powerpc64-embUpgrade linux-image-4.15.0-1083-azureUpgrade linux-image-generic-lts-xenialUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-azureUpgrade linux-image-4.15.0-1081-oemUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-1062-raspi2Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.3.0-1022-azureUpgrade linux-image-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1011-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1011-oracleUpgrade linux-image-4.15.0-1059-gkeUpgrade linux-image-oem-osp1Upgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-1060-kvmUpgrade linux-image-virtualUpgrade linux-image-gcpUpgrade linux-image-4.15.0-101-genericUpgrade linux-image-virtual-hwe-18.04 | May 19, 2020 | Apr 6, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 6, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub