It was discovered that aufs improperly managed inode reference counts in the vfsub_dentry_open() method. A local attacker could use this vulnerability to cause a denial of service attack.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-azure-edgeUpgrade linux-image-5.4.0-30-genericUpgrade linux-image-4.4.0-186-powerpc-e500mcUpgrade linux-image-5.3.0-64-lowlatencyUpgrade linux-image-5.0.0-1045-gkeUpgrade linux-image-4.15.0-1067-raspi2Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-1136-raspi2Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-gcpUpgrade linux-image-raspiUpgrade linux-image-4.15.0-1093-oemUpgrade linux-image-5.4.0-42-lowlatencyUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-gke-4.15Upgrade linux-image-5.4.0-42-genericUpgrade linux-image-4.4.0-1140-snapdragonUpgrade linux-image-4.15.0-112-genericUpgrade linux-image-5.3.0-1030-oracleUpgrade linux-image-raspi2Upgrade linux-image-5.4.0-1021-oracleUpgrade linux-image-5.3.0-1030-raspi2Upgrade linux-image-gke-5.3Upgrade linux-image-4.4.0-1111-awsUpgrade linux-image-4.4.0-1075-awsUpgrade linux-image-awsUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-1077-kvmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1080-gcpUpgrade linux-image-4.15.0-1050-oracleUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-gke-5.0Upgrade linux-image-5.3.0-64-genericUpgrade linux-image-4.4.0-186-powerpc64-embUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-powerpc64-embUpgrade linux-image-5.3.0-1032-gcpUpgrade linux-image-aws-hweUpgrade linux-image-azureUpgrade linux-image-kvmUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-oem-osp1Upgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-1083-snapdragonUpgrade linux-image-5.4.0-1020-awsUpgrade linux-image-gkeop-5.3Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-1079-awsUpgrade linux-image-oemUpgrade linux-image-4.4.0-186-powerpc64-smpUpgrade linux-image-azure-lts-18.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-1092-azureUpgrade linux-image-powerpc-smpUpgrade linux-image-5.3.0-1034-azureUpgrade linux-image-4.4.0-186-powerpc-smpUpgrade linux-image-5.0.0-1065-oem-osp1Upgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1066-gkeUpgrade linux-image-4.4.0-186-generic-lpaeUpgrade linux-image-5.4.0-1021-gcpUpgrade linux-image-5.3.0-1032-gkeUpgrade linux-image-4.4.0-186-genericUpgrade linux-image-5.4.0-1022-azureUpgrade linux-image-virtualUpgrade linux-image-genericUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-42-generic-lpaeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.15.0-1071-kvmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-112-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-snapdragonUpgrade linux-image-powerpc64-smpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-186-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-5.4.0-1015-raspiUpgrade linux-image-5.3.0-64-generic-lpaeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.3.0-1032-awsUpgrade linux-image-4.15.0-112-lowlatency | Aug 5, 2020 | Jul 27, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub