A flaw was found in the Linux kernel before 5.9-rc4. Memory corruption can be exploited to gain root privileges from unprivileged processes. The highest threat from this vulnerability is to data confidentiality and integrity.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-livepatch-4.14.186-146.268Upgrade kernelUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-livepatch-4.14.181-142.260-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.192-147.314-debuginfoUpgrade kernel-livepatch-4.14.181-142.260Upgrade python-perfUpgrade kernel-livepatch-4.14.186-146.268-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-4.14.193-149.317Upgrade kernel-livepatch-4.14.192-147.314 | Sep 8, 2020 | Sep 8, 2020 |
| Amazon_linux | — | Upgrade kernel | Sep 5, 2020 | Sep 3, 2020 |
| Centos_linux | — | Upgrade kpatch-patch-4_18_0-193_1_2-debuginfoUpgrade kpatch-patch-4_18_0-193_14_3Upgrade kpatch-patch-4_18_0-193_13_2-debugsourceUpgrade kpatch-patch-4_18_0-193_1_2-debugsourceUpgrade kpatch-patch-4_18_0-193_19_1-debugsourceUpgrade kpatch-patch-4_18_0-193-debugsourceUpgrade kpatch-patch-4_18_0-193Upgrade kernelUpgrade kpatch-patch-4_18_0-193_19_1Upgrade kpatch-patch-4_18_0-193_6_3Upgrade kpatch-patch-4_18_0-193_19_1-debuginfoUpgrade kpatch-patch-4_18_0-193_6_3-debugsourceUpgrade kernel-rtUpgrade kpatch-patch-4_18_0-193_14_3-debuginfoUpgrade kpatch-patch-4_18_0-193_1_2Upgrade kpatch-patch-4_18_0-193-debuginfoUpgrade kpatch-patch-4_18_0-193_13_2-debuginfoUpgrade kpatch-patch-4_18_0-193_6_3-debuginfoUpgrade kpatch-patch-4_18_0-193_13_2Upgrade kpatch-patch-4_18_0-193_14_3-debugsource | Oct 21, 2020 | Sep 16, 2020 |
| Debian | — | Upgrade linux | Sep 28, 2020 | Sep 16, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernelUpgrade perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-debug-develUpgrade python-perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-headers | Nov 3, 2020 | Sep 16, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade kernelUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-devel | Jan 20, 2021 | Sep 16, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-headersUpgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernel-develUpgrade kernel-tools-libs | Dec 16, 2020 | Sep 16, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-develUpgrade kernel-sourceUpgrade perfUpgrade kernel-tools-libsUpgrade python-perf | Nov 3, 2020 | Sep 16, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libs | Oct 13, 2020 | Sep 16, 2020 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 13, 2020 | Sep 3, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Sep 16, 2020 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Oct 21, 2020 | Sep 16, 2020 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-docs | Sep 8, 2020 | Sep 3, 2020 |
| Ubuntu | — | Upgrade linux-image-lowlatencyUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.0.0-1047-gkeUpgrade linux-image-5.3.0-67-lowlatencyUpgrade linux-image-gke-4.15Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-gkeUpgrade linux-image-5.0.0-1068-oem-osp1Upgrade linux-image-4.15.0-1053-oracleUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1083-gcpUpgrade linux-image-4.15.0-1074-kvmUpgrade linux-image-aws-hweUpgrade linux-image-oracleUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.3.0-1036-gkeUpgrade linux-image-oemUpgrade linux-image-5.4.0-1018-raspiUpgrade linux-image-5.4.0-1024-gcpUpgrade linux-image-5.4.0-47-genericUpgrade linux-image-4.15.0-117-generic-lpaeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-lpaeUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-5.3.0-1033-raspi2Upgrade linux-image-5.4.0-1024-oracleUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtualUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.3.0-67-genericUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-47-lowlatencyUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.15.0-1070-raspi2Upgrade linux-image-4.15.0-1069-gkeUpgrade linux-image-gke-5.4Upgrade linux-image-azure-lts-18.04Upgrade linux-image-raspiUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-snapdragonUpgrade linux-image-4.15.0-117-lowlatencyUpgrade linux-image-4.15.0-1082-awsUpgrade linux-image-gke-5.3Upgrade linux-image-gcpUpgrade linux-image-4.15.0-1096-oemUpgrade linux-image-4.15.0-117-genericUpgrade linux-image-oem-osp1Upgrade linux-image-5.3.0-1035-awsUpgrade linux-image-awsUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1086-snapdragonUpgrade linux-image-raspi2Upgrade linux-image-aws-lts-18.04Upgrade linux-image-azureUpgrade linux-image-5.4.0-47-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-gkeop-5.3Upgrade linux-image-gke-5.0Upgrade linux-image-5.4.0-1024-awsUpgrade linux-image-5.4.0-1025-azureUpgrade linux-image-4.15.0-1095-azureUpgrade linux-image-gcp-lts-18.04 | Sep 9, 2020 | Sep 3, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 16, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub