In the Linux kernel before 5.4.16, a race condition in tty->disc_data handling in the slip and slcan line discipline could lead to a use-after-free, aka CID-0ace17d56824. This affects drivers/net/slip/slip.c and drivers/net/can/slcan.c.
CVSS Details
- CVSS 3.1 Base Score: 4.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 18, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel | Sep 7, 2021 | Jun 18, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade kernel-develUpgrade bpftoolUpgrade perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-sourceUpgrade python-perfUpgrade kernel-toolsUpgrade kernel | Jul 31, 2020 | Jun 18, 2020 |
| Oracle_linux | — | Upgrade kernel-uek | Aug 7, 2020 | Jun 18, 2020 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-obs-build | Jul 7, 2020 | Jun 18, 2020 |
| Ubuntu | — | Upgrade linux-aws-fipsUpgrade linux-gke-5.3Upgrade linux-snapdragonUpgrade linux-awsUpgrade linux-azure-fde-5.15Upgrade linux-oemUpgrade linux-aws-hweUpgrade linux-hweUpgrade linux-azureUpgrade linux-lts-xenialUpgrade linuxUpgrade linux-azure-fipsUpgrade linux-raspi2-5.3Upgrade linux-fipsUpgrade linux-gcpUpgrade linux-oem-osp1Upgrade linux-gke-4.15Upgrade linux-raspi2Upgrade linux-gke-5.0Upgrade linux-azure-5.3Upgrade linux-gcp-5.3Upgrade linux-kvmUpgrade linux-oracle | Nov 19, 2024 | Jun 18, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 18, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub