A flaw was found in the Linux kernel before 5.9-rc4. Memory corruption can be exploited to gain root privileges from unprivileged processes. The highest threat from this vulnerability is to data confidentiality and integrity.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.181-142.260Upgrade kernel-livepatch-4.14.186-146.268-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-4.14.193-149.317Upgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.192-147.314-debuginfoUpgrade python-perfUpgrade kernel-livepatch-4.14.192-147.314Upgrade kernel-headersUpgrade kernel-livepatch-4.14.186-146.268Upgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-livepatch-4.14.181-142.260-debuginfo | Sep 8, 2020 | Sep 8, 2020 |
| Amazon_linux | — | Upgrade kernel | Sep 5, 2020 | Sep 3, 2020 |
| Centos_linux | — | Upgrade kpatch-patch-4_18_0-193_6_3-debugsourceUpgrade kpatch-patch-4_18_0-193_6_3-debuginfoUpgrade kpatch-patch-4_18_0-193_13_2-debuginfoUpgrade kpatch-patch-4_18_0-193_1_2Upgrade kernel-rtUpgrade kpatch-patch-4_18_0-193_14_3-debugsourceUpgrade kpatch-patch-4_18_0-193_14_3-debuginfoUpgrade kpatch-patch-4_18_0-193-debuginfoUpgrade kpatch-patch-4_18_0-193_13_2Upgrade kpatch-patch-4_18_0-193_13_2-debugsourceUpgrade kpatch-patch-4_18_0-193_14_3Upgrade kpatch-patch-4_18_0-193_19_1Upgrade kpatch-patch-4_18_0-193-debugsourceUpgrade kpatch-patch-4_18_0-193_1_2-debuginfoUpgrade kpatch-patch-4_18_0-193_6_3Upgrade kpatch-patch-4_18_0-193_19_1-debugsourceUpgrade kpatch-patch-4_18_0-193_19_1-debuginfoUpgrade kernelUpgrade kpatch-patch-4_18_0-193Upgrade kpatch-patch-4_18_0-193_1_2-debugsource | Oct 21, 2020 | Sep 16, 2020 |
| Debian | — | Upgrade linux | Sep 28, 2020 | Sep 16, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernelUpgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debug-develUpgrade python-perfUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libs | Nov 3, 2020 | Sep 16, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade perf | Jan 20, 2021 | Sep 16, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade kernel-develUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-headers | Dec 16, 2020 | Sep 16, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade kernel-tools-libsUpgrade kernel-develUpgrade python3-perfUpgrade kernel-sourceUpgrade python-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel | Nov 3, 2020 | Sep 16, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | Oct 13, 2020 | Sep 16, 2020 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 13, 2020 | Sep 3, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Sep 16, 2020 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Oct 21, 2020 | Sep 16, 2020 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-docs | Sep 8, 2020 | Sep 3, 2020 |
| Ubuntu | — | Upgrade linux-image-gke-5.3Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-snapdragonUpgrade linux-image-gcpUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-1070-raspi2Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-117-lowlatencyUpgrade linux-image-gkeop-5.3Upgrade linux-image-4.15.0-1082-awsUpgrade linux-image-5.3.0-1035-awsUpgrade linux-image-gke-5.4Upgrade linux-image-aws-lts-18.04Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-azureUpgrade linux-image-4.15.0-1096-oemUpgrade linux-image-5.4.0-1024-awsUpgrade linux-image-4.15.0-1069-gkeUpgrade linux-image-5.4.0-47-lowlatencyUpgrade linux-image-5.4.0-47-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-4.15.0-1086-snapdragonUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-1095-azureUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.3.0-67-genericUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1025-azureUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-117-genericUpgrade linux-image-gke-5.0Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-raspi2Upgrade linux-image-oem-osp1Upgrade linux-image-kvmUpgrade linux-image-genericUpgrade linux-image-5.0.0-1068-oem-osp1Upgrade linux-image-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-oemUpgrade linux-image-5.4.0-1024-oracleUpgrade linux-image-5.3.0-67-lowlatencyUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-4.15.0-117-generic-lpaeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-aws-hweUpgrade linux-image-5.4.0-1018-raspiUpgrade linux-image-4.15.0-1053-oracleUpgrade linux-image-5.4.0-47-genericUpgrade linux-image-gkeUpgrade linux-image-gke-4.15Upgrade linux-image-5.4.0-1024-gcpUpgrade linux-image-5.3.0-1036-gkeUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.0.0-1047-gkeUpgrade linux-image-4.15.0-1074-kvmUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1083-gcpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.3.0-1033-raspi2 | Sep 9, 2020 | Sep 3, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 16, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub