It was discovered that aufs improperly managed inode reference counts in the vfsub_dentry_open() method. A local attacker could use this vulnerability to cause a denial of service attack.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-4.4.0-1077-kvmUpgrade linux-image-5.3.0-1030-oracleUpgrade linux-image-4.4.0-1111-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-1050-oracleUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-5.4.0-42-lowlatencyUpgrade linux-image-4.15.0-112-genericUpgrade linux-image-raspiUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-gke-5.0Upgrade linux-image-4.4.0-186-powerpc64-embUpgrade linux-image-5.3.0-64-lowlatencyUpgrade linux-image-4.15.0-1080-gcpUpgrade linux-image-gke-5.3Upgrade linux-image-5.3.0-1030-raspi2Upgrade linux-image-lowlatencyUpgrade linux-image-azure-edgeUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-1136-raspi2Upgrade linux-image-4.15.0-1093-oemUpgrade linux-image-4.4.0-1075-awsUpgrade linux-image-gke-4.15Upgrade linux-image-4.4.0-186-powerpc-e500mcUpgrade linux-image-powerpc64-embUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-kvmUpgrade linux-image-5.3.0-1032-gcpUpgrade linux-image-awsUpgrade linux-image-5.4.0-30-genericUpgrade linux-image-5.0.0-1045-gkeUpgrade linux-image-5.4.0-42-genericUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-1067-raspi2Upgrade linux-image-aws-hweUpgrade linux-image-5.4.0-1021-oracleUpgrade linux-image-4.4.0-1140-snapdragonUpgrade linux-image-5.3.0-64-genericUpgrade linux-image-genericUpgrade linux-image-5.3.0-1032-gkeUpgrade linux-image-5.4.0-1020-awsUpgrade linux-image-4.4.0-186-powerpc-smpUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-gkeop-5.3Upgrade linux-image-4.15.0-1079-awsUpgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.4.0-186-generic-lpaeUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.4.0-186-genericUpgrade linux-image-5.4.0-1021-gcpUpgrade linux-image-oem-osp1Upgrade linux-image-virtualUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-1092-azureUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-42-generic-lpaeUpgrade linux-image-4.15.0-1066-gkeUpgrade linux-image-4.4.0-186-powerpc64-smpUpgrade linux-image-4.4.0-186-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-112-generic-lpaeUpgrade linux-image-4.15.0-1071-kvmUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-gkeop-5.4Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.4.0-1022-azureUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-1083-snapdragonUpgrade linux-image-5.3.0-1032-awsUpgrade linux-image-5.3.0-64-generic-lpaeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-oemUpgrade linux-image-5.0.0-1065-oem-osp1Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.3.0-1034-azureUpgrade linux-image-powerpc-smpUpgrade linux-image-5.4.0-1015-raspiUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-112-lowlatencyUpgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-raspi2 | Aug 5, 2020 | Jul 27, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub