A TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local attackers to corrupt memory or possibly have unspecified other impact because a size check is in fs/nfs/nfs4proc.c instead of fs/nfs/nfs4xdr.c, aka CID-b4487b935452.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Sep 9, 2020 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.198-152.320Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-tools-develUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python-perfUpgrade python-perf-debuginfo | Oct 2, 2020 | Sep 9, 2020 |
| Amazon_linux | — | Upgrade kernel | Oct 28, 2020 | Sep 9, 2020 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Oct 20, 2020 | Sep 9, 2020 |
| Debian | — | Upgrade linux | Sep 28, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-headersUpgrade python-perf | Nov 3, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-develUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-toolsUpgrade perfUpgrade python-perfUpgrade kernel-tools-libs | Jan 20, 2021 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade perfUpgrade python-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-devel | Nov 2, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libs-develUpgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade python-perfUpgrade perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-devel | Sep 29, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Oct 13, 2020 | Sep 9, 2020 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 7, 2020 | Sep 9, 2020 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Oct 20, 2020 | Sep 9, 2020 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-obs-build | Oct 11, 2020 | Sep 9, 2020 |
| Ubuntu | — | Upgrade linux-image-4.4.0-190-powerpc64-embUpgrade linux-image-5.4.0-1025-gcpUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1099-oemUpgrade linux-image-4.15.0-1072-gkeUpgrade linux-image-4.4.0-190-powerpc-e500mcUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.4.0-1143-snapdragonUpgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc64-smpUpgrade linux-image-kvmUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-48-genericUpgrade linux-image-4.15.0-1086-awsUpgrade linux-image-4.15.0-1086-gcpUpgrade linux-image-5.4.0-48-lowlatencyUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-120-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-190-genericUpgrade linux-image-4.15.0-1098-azureUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.4.0-190-lowlatencyUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-virtualUpgrade linux-image-4.15.0-1073-raspi2Upgrade linux-image-gkeUpgrade linux-image-powerpc64-embUpgrade linux-image-5.4.0-1024-kvmUpgrade linux-image-4.4.0-190-powerpc64-smpUpgrade linux-image-oracleUpgrade linux-image-4.15.0-121-generic-lpaeUpgrade linux-image-4.15.0-121-lowlatencyUpgrade linux-image-4.4.0-190-powerpc-smpUpgrade linux-image-5.4.0-48-generic-lpaeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gke-4.15Upgrade linux-image-4.15.0-1085-awsUpgrade linux-image-aws-lts-18.04Upgrade linux-image-powerpc-e500mcUpgrade linux-image-raspi2Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-oem-osp1Upgrade linux-image-azureUpgrade linux-image-raspiUpgrade linux-image-4.4.0-1078-awsUpgrade linux-image-genericUpgrade linux-image-4.15.0-1056-oracleUpgrade linux-image-4.15.0-1099-azureUpgrade linux-image-oemUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1057-oracleUpgrade linux-image-4.15.0-120-lowlatencyUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1019-raspiUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-1080-kvmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1077-kvmUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-5.4.0-1026-azureUpgrade linux-image-5.4.0-1025-awsUpgrade linux-image-5.4.0-1025-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1089-snapdragonUpgrade linux-image-4.4.0-190-generic-lpaeUpgrade linux-image-4.4.0-1114-awsUpgrade linux-image-powerpc-smpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.15.0-121-genericUpgrade linux-image-4.15.0-120-genericUpgrade linux-image-4.4.0-1139-raspi2Upgrade linux-image-5.6.0-1048-oem | Sep 22, 2020 | Sep 9, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 9, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub