A flaw was found in the Linux kernel before 5.9-rc4. Memory corruption can be exploited to gain root privileges from unprivileged processes. The highest threat from this vulnerability is to data confidentiality and integrity.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.181-142.260Upgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-headersUpgrade kernel-livepatch-4.14.192-147.314-debuginfoUpgrade kernel-livepatch-4.14.192-147.314Upgrade kernel-livepatch-4.14.186-146.268-debuginfoUpgrade kernel-livepatch-4.14.193-149.317Upgrade kernel-livepatch-4.14.186-146.268Upgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-4.14.181-142.260-debuginfoUpgrade perf-debuginfoUpgrade kernel | Sep 8, 2020 | Sep 8, 2020 |
| Amazon_linux | — | Upgrade kernel | Sep 5, 2020 | Sep 3, 2020 |
| Centos_linux | — | Upgrade kpatch-patch-4_18_0-193-debuginfoUpgrade kpatch-patch-4_18_0-193_1_2Upgrade kpatch-patch-4_18_0-193_6_3-debuginfoUpgrade kpatch-patch-4_18_0-193_14_3-debugsourceUpgrade kpatch-patch-4_18_0-193_13_2-debuginfoUpgrade kpatch-patch-4_18_0-193_6_3-debugsourceUpgrade kpatch-patch-4_18_0-193_14_3-debuginfoUpgrade kernel-rtUpgrade kpatch-patch-4_18_0-193_13_2Upgrade kpatch-patch-4_18_0-193_6_3Upgrade kpatch-patch-4_18_0-193_19_1-debugsourceUpgrade kpatch-patch-4_18_0-193_19_1-debuginfoUpgrade kernelUpgrade kpatch-patch-4_18_0-193Upgrade kpatch-patch-4_18_0-193_19_1Upgrade kpatch-patch-4_18_0-193_1_2-debugsourceUpgrade kpatch-patch-4_18_0-193_14_3Upgrade kpatch-patch-4_18_0-193_1_2-debuginfoUpgrade kpatch-patch-4_18_0-193_13_2-debugsourceUpgrade kpatch-patch-4_18_0-193-debugsource | Oct 21, 2020 | Sep 16, 2020 |
| Debian | — | Upgrade linux | Sep 28, 2020 | Sep 16, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-toolsUpgrade kernelUpgrade perf | Nov 3, 2020 | Sep 16, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade perf | Jan 20, 2021 | Sep 16, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-headersUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-toolsUpgrade python-perf | Dec 16, 2020 | Sep 16, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-sourceUpgrade python-perfUpgrade perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade kernel-headers | Nov 3, 2020 | Sep 16, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Oct 13, 2020 | Sep 16, 2020 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 13, 2020 | Sep 3, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Sep 16, 2020 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Oct 21, 2020 | Sep 16, 2020 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-docs | Sep 8, 2020 | Sep 3, 2020 |
| Ubuntu | — | Upgrade linux-image-virtualUpgrade linux-image-5.4.0-1018-raspiUpgrade linux-image-genericUpgrade linux-image-5.0.0-1068-oem-osp1Upgrade linux-image-oracleUpgrade linux-image-5.3.0-67-lowlatencyUpgrade linux-image-5.4.0-47-genericUpgrade linux-image-gke-4.15Upgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1053-oracleUpgrade linux-image-5.3.0-1036-gkeUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.3.0-1033-raspi2Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-aws-hweUpgrade linux-image-gkeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-4.15.0-117-generic-lpaeUpgrade linux-image-4.15.0-1074-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-5.0.0-1047-gkeUpgrade linux-image-5.4.0-1024-gcpUpgrade linux-image-oemUpgrade linux-image-5.4.0-1024-oracleUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1083-gcpUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-1024-awsUpgrade linux-image-azureUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.3.0-67-genericUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.3.0-1035-awsUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-5.4.0-1025-azureUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gke-5.0Upgrade linux-image-awsUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-47-generic-lpaeUpgrade linux-image-4.15.0-1086-snapdragonUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1070-raspi2Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gkeop-5.3Upgrade linux-image-raspiUpgrade linux-image-oem-osp1Upgrade linux-image-4.15.0-117-genericUpgrade linux-image-gke-5.3Upgrade linux-image-gcpUpgrade linux-image-4.15.0-1095-azureUpgrade linux-image-4.15.0-1096-oemUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-117-lowlatencyUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1082-awsUpgrade linux-image-4.15.0-1069-gkeUpgrade linux-image-gke-5.4Upgrade linux-image-5.4.0-47-lowlatency | Sep 9, 2020 | Sep 3, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 16, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub