A TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local attackers to corrupt memory or possibly have unspecified other impact because a size check is in fs/nfs/nfs4proc.c instead of fs/nfs/nfs4xdr.c, aka CID-b4487b935452.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Sep 9, 2020 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade python-perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-4.14.198-152.320Upgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade perfUpgrade perf-debuginfo | Oct 2, 2020 | Sep 9, 2020 |
| Amazon_linux | — | Upgrade kernel | Oct 28, 2020 | Sep 9, 2020 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Oct 20, 2020 | Sep 9, 2020 |
| Debian | — | Upgrade linux | Sep 28, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debug-develUpgrade perfUpgrade kernelUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python-perf | Nov 3, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-develUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-toolsUpgrade python-perf | Jan 20, 2021 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-libs | Nov 2, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade kernel-develUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-tools-libs-develUpgrade python3-perfUpgrade python-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-headers | Sep 29, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Oct 13, 2020 | Sep 9, 2020 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 7, 2020 | Sep 9, 2020 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Oct 20, 2020 | Sep 9, 2020 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-default-extraUpgrade kernel-obs-build | Oct 11, 2020 | Sep 9, 2020 |
| Ubuntu | — | Upgrade linux-image-4.15.0-121-genericUpgrade linux-image-4.15.0-1057-oracleUpgrade linux-image-5.4.0-1025-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-powerpc-smpUpgrade linux-image-4.15.0-1089-snapdragonUpgrade linux-image-5.6.0-1048-oemUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.4.0-1019-raspiUpgrade linux-image-4.15.0-1077-kvmUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-120-genericUpgrade linux-image-4.4.0-190-generic-lpaeUpgrade linux-image-5.4.0-1025-awsUpgrade linux-image-4.4.0-1114-awsUpgrade linux-image-aws-hweUpgrade linux-image-oemUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-1056-oracleUpgrade linux-image-raspiUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-1099-azureUpgrade linux-image-4.4.0-1078-awsUpgrade linux-image-azureUpgrade linux-image-5.4.0-1026-azureUpgrade linux-image-4.15.0-120-lowlatencyUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.4.0-1080-kvmUpgrade linux-image-gcpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-4.4.0-1139-raspi2Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-oem-osp1Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-190-powerpc64-embUpgrade linux-image-4.15.0-1086-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-powerpc64-smpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-190-powerpc-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-4.15.0-121-generic-lpaeUpgrade linux-image-5.4.0-48-genericUpgrade linux-image-5.4.0-48-generic-lpaeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-1085-awsUpgrade linux-image-4.4.0-190-powerpc64-smpUpgrade linux-image-gke-4.15Upgrade linux-image-4.15.0-121-lowlatencyUpgrade linux-image-5.4.0-1024-kvmUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.4.0-190-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-1086-awsUpgrade linux-image-oracleUpgrade linux-image-4.4.0-190-genericUpgrade linux-image-4.15.0-120-generic-lpaeUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-5.4.0-48-lowlatencyUpgrade linux-image-4.15.0-1098-azureUpgrade linux-image-kvmUpgrade linux-image-4.4.0-1143-snapdragonUpgrade linux-image-4.4.0-190-powerpc-e500mcUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-1073-raspi2Upgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1099-oemUpgrade linux-image-raspi2Upgrade linux-image-gkeUpgrade linux-image-5.4.0-1025-gcpUpgrade linux-image-4.15.0-1072-gkeUpgrade linux-image-awsUpgrade linux-image-virtual-hwe-16.04 | Sep 22, 2020 | Sep 9, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 9, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub