A flaw was found in the Linux kernel before 5.9-rc4. Memory corruption can be exploited to gain root privileges from unprivileged processes. The highest threat from this vulnerability is to data confidentiality and integrity.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.181-142.260-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernelUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-4.14.186-146.268Upgrade kernel-livepatch-4.14.181-142.260Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-livepatch-4.14.192-147.314-debuginfoUpgrade kernel-livepatch-4.14.193-149.317Upgrade kernel-livepatch-4.14.192-147.314Upgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.186-146.268-debuginfoUpgrade kernel-debuginfo-common-x86_64 | Sep 8, 2020 | Sep 8, 2020 |
| Amazon_linux | — | Upgrade kernel | Sep 5, 2020 | Sep 3, 2020 |
| Centos_linux | — | Upgrade kpatch-patch-4_18_0-193_13_2-debuginfoUpgrade kpatch-patch-4_18_0-193_6_3-debuginfoUpgrade kernel-rtUpgrade kpatch-patch-4_18_0-193_14_3-debuginfoUpgrade kpatch-patch-4_18_0-193_14_3-debugsourceUpgrade kpatch-patch-4_18_0-193_13_2Upgrade kpatch-patch-4_18_0-193_1_2Upgrade kpatch-patch-4_18_0-193-debuginfoUpgrade kpatch-patch-4_18_0-193_6_3-debugsourceUpgrade kpatch-patch-4_18_0-193_19_1-debuginfoUpgrade kpatch-patch-4_18_0-193_14_3Upgrade kpatch-patch-4_18_0-193_1_2-debugsourceUpgrade kpatch-patch-4_18_0-193-debugsourceUpgrade kpatch-patch-4_18_0-193_6_3Upgrade kpatch-patch-4_18_0-193Upgrade kpatch-patch-4_18_0-193_1_2-debuginfoUpgrade kernelUpgrade kpatch-patch-4_18_0-193_19_1Upgrade kpatch-patch-4_18_0-193_19_1-debugsourceUpgrade kpatch-patch-4_18_0-193_13_2-debugsource | Oct 21, 2020 | Sep 16, 2020 |
| Debian | — | Upgrade linux | Sep 28, 2020 | Sep 16, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade python-perf | Nov 3, 2020 | Sep 16, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-tools-libsUpgrade kernelUpgrade python-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel-headersUpgrade kernel-debuginfo | Jan 20, 2021 | Sep 16, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade kernel-tools-libsUpgrade python-perf | Dec 16, 2020 | Sep 16, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-sourceUpgrade python-perfUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-develUpgrade kernel-toolsUpgrade perf | Nov 3, 2020 | Sep 16, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | Oct 13, 2020 | Sep 16, 2020 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 13, 2020 | Sep 3, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Sep 16, 2020 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Oct 21, 2020 | Sep 16, 2020 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-default-extraUpgrade kernel-obs-build | Sep 8, 2020 | Sep 3, 2020 |
| Ubuntu | — | Upgrade linux-image-gke-5.4Upgrade linux-image-5.3.0-1035-awsUpgrade linux-image-4.15.0-1082-awsUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-raspi2Upgrade linux-image-4.15.0-1096-oemUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-1069-gkeUpgrade linux-image-4.15.0-117-lowlatencyUpgrade linux-image-gkeop-5.3Upgrade linux-image-oem-osp1Upgrade linux-image-4.15.0-1095-azureUpgrade linux-image-5.3.0-67-genericUpgrade linux-image-kvmUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.4.0-47-generic-lpaeUpgrade linux-image-4.15.0-1070-raspi2Upgrade linux-image-aws-lts-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-azureUpgrade linux-image-gke-5.0Upgrade linux-image-5.4.0-47-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1024-awsUpgrade linux-image-snapdragonUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1025-azureUpgrade linux-image-gke-5.3Upgrade linux-image-4.15.0-117-genericUpgrade linux-image-awsUpgrade linux-image-4.15.0-1086-snapdragonUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-4.15.0-1053-oracleUpgrade linux-image-5.0.0-1068-oem-osp1Upgrade linux-image-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-genericUpgrade linux-image-5.4.0-1018-raspiUpgrade linux-image-gke-4.15Upgrade linux-image-4.15.0-1074-kvmUpgrade linux-image-aws-hweUpgrade linux-image-gkeUpgrade linux-image-5.0.0-1047-gkeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-47-genericUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.15.0-117-generic-lpaeUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1024-gcpUpgrade linux-image-virtualUpgrade linux-image-5.3.0-1036-gkeUpgrade linux-image-4.15.0-1083-gcpUpgrade linux-image-5.3.0-67-lowlatencyUpgrade linux-image-5.3.0-1033-raspi2Upgrade linux-image-5.4.0-1024-oracle | Sep 9, 2020 | Sep 3, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 16, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub