A TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local attackers to corrupt memory or possibly have unspecified other impact because a size check is in fs/nfs/nfs4proc.c instead of fs/nfs/nfs4xdr.c, aka CID-b4487b935452.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Sep 9, 2020 |
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade perfUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-4.14.198-152.320Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-tools-devel | Oct 2, 2020 | Sep 9, 2020 |
| Amazon_linux | — | Upgrade kernel | Oct 28, 2020 | Sep 9, 2020 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Oct 20, 2020 | Sep 9, 2020 |
| Debian | — | Upgrade linux | Sep 28, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-develUpgrade kernel-debuginfoUpgrade perf | Nov 3, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernelUpgrade kernel-toolsUpgrade perfUpgrade python-perfUpgrade kernel-tools-libs | Jan 20, 2021 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade perfUpgrade kernel-headersUpgrade python-perf | Nov 2, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade python3-perfUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libs-develUpgrade kernel-tools-libsUpgrade kernel-develUpgrade bpftool | Sep 29, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Oct 13, 2020 | Sep 9, 2020 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 7, 2020 | Sep 9, 2020 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Oct 20, 2020 | Sep 9, 2020 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-docs | Oct 11, 2020 | Sep 9, 2020 |
| Ubuntu | — | Upgrade linux-image-raspiUpgrade linux-image-4.15.0-120-genericUpgrade linux-image-azureUpgrade linux-image-oem-osp1Upgrade linux-image-4.15.0-1056-oracleUpgrade linux-image-4.4.0-190-generic-lpaeUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.4.0-1025-awsUpgrade linux-image-4.15.0-1089-snapdragonUpgrade linux-image-4.15.0-121-genericUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-aws-hweUpgrade linux-image-oemUpgrade linux-image-genericUpgrade linux-image-4.4.0-1080-kvmUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1026-azureUpgrade linux-image-5.4.0-1019-raspiUpgrade linux-image-4.4.0-1078-awsUpgrade linux-image-5.4.0-1025-oracleUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.15.0-1057-oracleUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-1077-kvmUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.4.0-1114-awsUpgrade linux-image-4.15.0-1099-azureUpgrade linux-image-4.4.0-1139-raspi2Upgrade linux-image-powerpc-smpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.6.0-1048-oemUpgrade linux-image-4.15.0-120-lowlatencyUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-190-powerpc-e500mcUpgrade linux-image-raspi2Upgrade linux-image-5.4.0-1025-gcpUpgrade linux-image-virtualUpgrade linux-image-5.4.0-48-generic-lpaeUpgrade linux-image-5.4.0-48-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1073-raspi2Upgrade linux-image-4.15.0-1086-awsUpgrade linux-image-4.4.0-190-powerpc64-embUpgrade linux-image-aws-lts-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-1143-snapdragonUpgrade linux-image-4.15.0-120-generic-lpaeUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-1098-azureUpgrade linux-image-4.4.0-190-genericUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.15.0-1099-oemUpgrade linux-image-4.15.0-121-generic-lpaeUpgrade linux-image-snapdragonUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gke-4.15Upgrade linux-image-4.15.0-1072-gkeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc-e500mcUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.15.0-1086-gcpUpgrade linux-image-gkeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.4.0-1024-kvmUpgrade linux-image-awsUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.4.0-190-lowlatencyUpgrade linux-image-4.15.0-121-lowlatencyUpgrade linux-image-4.4.0-190-powerpc-smpUpgrade linux-image-4.4.0-190-powerpc64-smpUpgrade linux-image-4.15.0-1085-awsUpgrade linux-image-5.4.0-48-genericUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-powerpc64-embUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-generic-lpae | Sep 22, 2020 | Sep 9, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 9, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub