In the Linux kernel before 5.4.16, a race condition in tty->disc_data handling in the slip and slcan line discipline could lead to a use-after-free, aka CID-0ace17d56824. This affects drivers/net/slip/slip.c and drivers/net/can/slcan.c.
CVSS Details
- CVSS 3.1 Base Score: 4.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 18, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade perfUpgrade python-perfUpgrade kernel-headers | Sep 7, 2021 | Jun 18, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade perfUpgrade python3-perfUpgrade kernel-develUpgrade python-perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-sourceUpgrade kernel-tools-libsUpgrade kernel | Jul 31, 2020 | Jun 18, 2020 |
| Oracle_linux | — | Upgrade kernel-uek | Aug 7, 2020 | Jun 18, 2020 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-default | Jul 7, 2020 | Jun 18, 2020 |
| Ubuntu | — | Upgrade linuxUpgrade linux-aws-hweUpgrade linux-azureUpgrade linux-azure-fde-5.15Upgrade linux-lts-xenialUpgrade linux-hweUpgrade linux-azure-fipsUpgrade linux-gke-5.3Upgrade linux-snapdragonUpgrade linux-aws-fipsUpgrade linux-awsUpgrade linux-oemUpgrade linux-gke-4.15Upgrade linux-gke-5.0Upgrade linux-azure-5.3Upgrade linux-gcpUpgrade linux-oem-osp1Upgrade linux-oracleUpgrade linux-gcp-5.3Upgrade linux-kvmUpgrade linux-fipsUpgrade linux-raspi2Upgrade linux-raspi2-5.3 | Nov 19, 2024 | Jun 18, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 18, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub