A TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local attackers to corrupt memory or possibly have unspecified other impact because a size check is in fs/nfs/nfs4proc.c instead of fs/nfs/nfs4xdr.c, aka CID-b4487b935452.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Sep 9, 2020 |
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-livepatch-4.14.198-152.320Upgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernelUpgrade kernel-debuginfo | Oct 2, 2020 | Sep 9, 2020 |
| Amazon_linux | — | Upgrade kernel | Oct 28, 2020 | Sep 9, 2020 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Oct 20, 2020 | Sep 9, 2020 |
| Debian | — | Upgrade linux | Sep 28, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernelUpgrade kernel-debugUpgrade kernel-tools-libs | Nov 3, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-develUpgrade kernelUpgrade kernel-headers | Jan 20, 2021 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-develUpgrade python-perfUpgrade kernel-headersUpgrade perf | Nov 2, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade perfUpgrade kernel-toolsUpgrade kernel-tools-libs-develUpgrade kernelUpgrade python-perfUpgrade kernel-headersUpgrade kernel-develUpgrade bpftoolUpgrade kernel-tools-libs | Sep 29, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Oct 13, 2020 | Sep 9, 2020 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 7, 2020 | Sep 9, 2020 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Oct 20, 2020 | Sep 9, 2020 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-obs-build | Oct 11, 2020 | Sep 9, 2020 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.15.0-1099-azureUpgrade linux-image-5.4.0-1026-azureUpgrade linux-image-aws-hweUpgrade linux-image-oemUpgrade linux-image-4.4.0-1114-awsUpgrade linux-image-4.15.0-120-genericUpgrade linux-image-4.4.0-1139-raspi2Upgrade linux-image-5.6.0-1048-oemUpgrade linux-image-4.15.0-1089-snapdragonUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-190-generic-lpaeUpgrade linux-image-5.4.0-1025-awsUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-120-lowlatencyUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.15.0-1057-oracleUpgrade linux-image-powerpc-smpUpgrade linux-image-5.4.0-1025-oracleUpgrade linux-image-4.15.0-1056-oracleUpgrade linux-image-4.15.0-121-genericUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1019-raspiUpgrade linux-image-gcpUpgrade linux-image-oem-osp1Upgrade linux-image-raspiUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-1078-awsUpgrade linux-image-genericUpgrade linux-image-4.4.0-1080-kvmUpgrade linux-image-4.15.0-1077-kvmUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-1086-gcpUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-raspi2Upgrade linux-image-4.15.0-1073-raspi2Upgrade linux-image-aws-lts-18.04Upgrade linux-image-oracleUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-snapdragonUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1025-gcpUpgrade linux-image-4.15.0-1072-gkeUpgrade linux-image-4.15.0-1099-oemUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-48-lowlatencyUpgrade linux-image-4.4.0-190-powerpc-e500mcUpgrade linux-image-4.15.0-1085-awsUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.15.0-121-lowlatencyUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.4.0-1143-snapdragonUpgrade linux-image-4.4.0-190-powerpc64-smpUpgrade linux-image-4.4.0-190-powerpc-smpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-4.15.0-120-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-4.4.0-190-powerpc64-embUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-gkeUpgrade linux-image-awsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-190-lowlatencyUpgrade linux-image-4.15.0-1098-azureUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-generic-lts-xenialUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.4.0-190-genericUpgrade linux-image-5.4.0-48-genericUpgrade linux-image-5.4.0-1024-kvmUpgrade linux-image-4.15.0-121-generic-lpaeUpgrade linux-image-4.15.0-1086-awsUpgrade linux-image-gke-4.15Upgrade linux-image-5.4.0-48-generic-lpaeUpgrade linux-image-powerpc64-embUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-lowlatency-lts-xenial | Sep 22, 2020 | Sep 9, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 9, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub