A TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local attackers to corrupt memory or possibly have unspecified other impact because a size check is in fs/nfs/nfs4proc.c instead of fs/nfs/nfs4xdr.c, aka CID-b4487b935452.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Sep 9, 2020 |
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-livepatch-4.14.198-152.320Upgrade kernel-debuginfo-common-aarch64 | Oct 2, 2020 | Sep 9, 2020 |
| Amazon_linux | — | Upgrade kernel | Oct 28, 2020 | Sep 9, 2020 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Oct 20, 2020 | Sep 9, 2020 |
| Debian | — | Upgrade linux | Sep 28, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-headersUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-devel | Nov 3, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernelUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade perfUpgrade python-perfUpgrade kernel-tools-libs | Jan 20, 2021 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernel-develUpgrade kernelUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-headersUpgrade perf | Nov 2, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libs-develUpgrade python-perfUpgrade perfUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-develUpgrade bpftool | Sep 29, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Oct 13, 2020 | Sep 9, 2020 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 7, 2020 | Sep 9, 2020 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Oct 20, 2020 | Sep 9, 2020 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-default | Oct 11, 2020 | Sep 9, 2020 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1080-kvmUpgrade linux-image-gcpUpgrade linux-image-4.4.0-1078-awsUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1026-azureUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-1077-kvmUpgrade linux-image-azureUpgrade linux-image-genericUpgrade linux-image-4.15.0-120-genericUpgrade linux-image-4.15.0-120-lowlatencyUpgrade linux-image-4.15.0-121-genericUpgrade linux-image-aws-hweUpgrade linux-image-oemUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-1056-oracleUpgrade linux-image-4.4.0-1114-awsUpgrade linux-image-4.4.0-1139-raspi2Upgrade linux-image-5.6.0-1048-oemUpgrade linux-image-4.15.0-1099-azureUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1025-awsUpgrade linux-image-5.4.0-1019-raspiUpgrade linux-image-4.4.0-190-generic-lpaeUpgrade linux-image-5.4.0-1025-oracleUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-powerpc-smpUpgrade linux-image-4.15.0-1057-oracleUpgrade linux-image-4.15.0-1089-snapdragonUpgrade linux-image-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.4.0-190-genericUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.15.0-1086-gcpUpgrade linux-image-5.4.0-48-genericUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-121-lowlatencyUpgrade linux-image-5.4.0-48-generic-lpaeUpgrade linux-image-4.15.0-121-generic-lpaeUpgrade linux-image-oem-20.04Upgrade linux-image-4.15.0-1085-awsUpgrade linux-image-4.4.0-190-powerpc64-smpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-1143-snapdragonUpgrade linux-image-virtualUpgrade linux-image-5.4.0-1024-kvmUpgrade linux-image-4.15.0-1073-raspi2Upgrade linux-image-5.4.0-48-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-190-powerpc-e500mcUpgrade linux-image-kvmUpgrade linux-image-gke-4.15Upgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-1086-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-aws-lts-18.04Upgrade linux-image-powerpc-e500mcUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1072-gkeUpgrade linux-image-5.4.0-1025-gcpUpgrade linux-image-powerpc64-embUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1099-oemUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.4.0-190-lowlatencyUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-oracleUpgrade linux-image-4.15.0-1098-azureUpgrade linux-image-4.4.0-190-powerpc64-embUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-190-powerpc-smpUpgrade linux-image-4.15.0-120-generic-lpaeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-awsUpgrade linux-image-gkeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-virtual-lts-xenial | Sep 22, 2020 | Sep 9, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 9, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub