It was discovered that aufs improperly managed inode reference counts in the vfsub_dentry_open() method. A local attacker could use this vulnerability to cause a denial of service attack.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-4.4.0-186-generic-lpaeUpgrade linux-image-4.15.0-112-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1021-gcpUpgrade linux-image-4.15.0-1092-azureUpgrade linux-image-oem-osp1Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-112-generic-lpaeUpgrade linux-image-5.4.0-42-generic-lpaeUpgrade linux-image-4.4.0-186-powerpc64-smpUpgrade linux-image-gkeop-5.4Upgrade linux-image-4.15.0-1066-gkeUpgrade linux-image-4.4.0-186-lowlatencyUpgrade linux-image-5.3.0-1032-awsUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-5.4.0-1015-raspiUpgrade linux-image-4.15.0-1071-kvmUpgrade linux-image-snapdragonUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.15.0-1079-awsUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-gkeop-5.3Upgrade linux-image-4.4.0-186-powerpc-smpUpgrade linux-image-5.3.0-64-generic-lpaeUpgrade linux-image-powerpc-smpUpgrade linux-image-oemUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.0.0-1065-oem-osp1Upgrade linux-image-5.3.0-1034-azureUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-5.3.0-1032-gkeUpgrade linux-image-gkeUpgrade linux-image-5.4.0-1022-azureUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1083-snapdragonUpgrade linux-image-5.4.0-1020-awsUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-powerpc-e500mcUpgrade linux-image-oracleUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.4.0-186-genericUpgrade linux-image-virtualUpgrade linux-image-powerpc64-embUpgrade linux-image-5.3.0-64-lowlatencyUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-raspiUpgrade linux-image-4.4.0-186-powerpc-e500mcUpgrade linux-image-gcpUpgrade linux-image-4.4.0-186-powerpc64-embUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.15.0-112-genericUpgrade linux-image-5.4.0-42-lowlatencyUpgrade linux-image-5.3.0-64-genericUpgrade linux-image-raspi2Upgrade linux-image-5.4.0-1021-oracleUpgrade linux-image-5.3.0-1032-gcpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-aws-hweUpgrade linux-image-azure-edgeUpgrade linux-image-5.3.0-1030-raspi2Upgrade linux-image-kvmUpgrade linux-image-gke-5.3Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.15.0-1067-raspi2Upgrade linux-image-4.4.0-1075-awsUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-4.15.0-1093-oemUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-5.0.0-1045-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-awsUpgrade linux-image-azureUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-30-genericUpgrade linux-image-4.4.0-1140-snapdragonUpgrade linux-image-gke-4.15Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1050-oracleUpgrade linux-image-gke-5.0Upgrade linux-image-5.4.0-42-genericUpgrade linux-image-4.4.0-1077-kvmUpgrade linux-image-5.3.0-1030-oracleUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-1136-raspi2Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-1080-gcpUpgrade linux-image-4.4.0-1111-awsUpgrade linux-image-gcp-lts-18.04 | Aug 5, 2020 | Jul 27, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub