A TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local attackers to corrupt memory or possibly have unspecified other impact because a size check is in fs/nfs/nfs4proc.c instead of fs/nfs/nfs4xdr.c, aka CID-b4487b935452.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Sep 9, 2020 |
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-4.14.198-152.320Upgrade kernel-develUpgrade kernel-toolsUpgrade perf-debuginfo | Oct 2, 2020 | Sep 9, 2020 |
| Amazon_linux | — | Upgrade kernel | Oct 28, 2020 | Sep 9, 2020 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Oct 20, 2020 | Sep 9, 2020 |
| Debian | — | Upgrade linux | Sep 28, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-develUpgrade perf | Nov 3, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade python-perfUpgrade perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel | Jan 20, 2021 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade perfUpgrade python-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-libs | Nov 2, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade kernel-tools-libs-develUpgrade perfUpgrade kernelUpgrade kernel-headersUpgrade python-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-develUpgrade kernel-tools-libs | Sep 29, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Oct 13, 2020 | Sep 9, 2020 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 7, 2020 | Sep 9, 2020 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Oct 20, 2020 | Sep 9, 2020 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-default | Oct 11, 2020 | Sep 9, 2020 |
| Ubuntu | — | Upgrade linux-image-powerpc64-smpUpgrade linux-image-4.15.0-1099-oemUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-aws-lts-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-4.15.0-1073-raspi2Upgrade linux-image-5.4.0-48-genericUpgrade linux-image-4.4.0-190-powerpc64-embUpgrade linux-image-5.4.0-48-generic-lpaeUpgrade linux-image-4.15.0-121-generic-lpaeUpgrade linux-image-4.4.0-190-powerpc-smpUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-1086-gcpUpgrade linux-image-4.4.0-190-powerpc64-smpUpgrade linux-image-4.15.0-1072-gkeUpgrade linux-image-oem-20.04Upgrade linux-image-4.4.0-190-genericUpgrade linux-image-5.4.0-1024-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-190-lowlatencyUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-awsUpgrade linux-image-oracleUpgrade linux-image-kvmUpgrade linux-image-virtualUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-1143-snapdragonUpgrade linux-image-5.4.0-1025-gcpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-190-powerpc-e500mcUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.4.0-48-lowlatencyUpgrade linux-image-4.15.0-120-generic-lpaeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1098-azureUpgrade linux-image-4.15.0-1086-awsUpgrade linux-image-4.15.0-121-lowlatencyUpgrade linux-image-powerpc64-embUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1085-awsUpgrade linux-image-gke-4.15Upgrade linux-image-4.15.0-121-genericUpgrade linux-image-4.15.0-120-lowlatencyUpgrade linux-image-aws-hweUpgrade linux-image-oemUpgrade linux-image-4.4.0-1139-raspi2Upgrade linux-image-5.4.0-1025-oracleUpgrade linux-image-4.15.0-1057-oracleUpgrade linux-image-raspiUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1056-oracleUpgrade linux-image-4.4.0-1080-kvmUpgrade linux-image-genericUpgrade linux-image-5.4.0-1026-azureUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-5.4.0-1025-awsUpgrade linux-image-4.4.0-1114-awsUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.6.0-1048-oemUpgrade linux-image-4.4.0-190-generic-lpaeUpgrade linux-image-powerpc-smpUpgrade linux-image-5.4.0-1019-raspiUpgrade linux-image-4.15.0-1099-azureUpgrade linux-image-4.15.0-120-genericUpgrade linux-image-oem-osp1Upgrade linux-image-4.15.0-1077-kvmUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-azureUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-gcpUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-1078-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1089-snapdragon | Sep 22, 2020 | Sep 9, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 9, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub