A TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local attackers to corrupt memory or possibly have unspecified other impact because a size check is in fs/nfs/nfs4proc.c instead of fs/nfs/nfs4xdr.c, aka CID-b4487b935452.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-kernel-tools-libs-devel | May 4, 2022 | Sep 9, 2020 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-kernelamazon-linux-ami-2-upgrade-kernel-debuginfoamazon-linux-ami-2-upgrade-kernel-debuginfo-common-aarch64amazon-linux-ami-2-upgrade-kernel-debuginfo-common-x86_64amazon-linux-ami-2-upgrade-kernel-develamazon-linux-ami-2-upgrade-kernel-headersamazon-linux-ami-2-upgrade-kernel-livepatch-4-14-198-152-320amazon-linux-ami-2-upgrade-kernel-toolsamazon-linux-ami-2-upgrade-kernel-tools-debuginfoamazon-linux-ami-2-upgrade-kernel-tools-develamazon-linux-ami-2-upgrade-perfamazon-linux-ami-2-upgrade-perf-debuginfoamazon-linux-ami-2-upgrade-python-perfamazon-linux-ami-2-upgrade-python-perf-debuginfo | Oct 2, 2020 | Sep 9, 2020 | |
| Amazon_linux | — | amazon-linux-upgrade-kernel | Oct 28, 2020 | Sep 9, 2020 |
| Centos_linux | — | centos-upgrade-kernelcentos-upgrade-kernel-rt | Oct 20, 2020 | Sep 9, 2020 |
| Debian | debian-upgrade-linux | Sep 28, 2020 | Sep 9, 2020 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-kernelhuawei-euleros-2_0_sp2-upgrade-kernel-debughuawei-euleros-2_0_sp2-upgrade-kernel-debug-develhuawei-euleros-2_0_sp2-upgrade-kernel-debuginfohuawei-euleros-2_0_sp2-upgrade-kernel-debuginfo-common-x86_64huawei-euleros-2_0_sp2-upgrade-kernel-develhuawei-euleros-2_0_sp2-upgrade-kernel-headershuawei-euleros-2_0_sp2-upgrade-kernel-toolshuawei-euleros-2_0_sp2-upgrade-kernel-tools-libshuawei-euleros-2_0_sp2-upgrade-perfhuawei-euleros-2_0_sp2-upgrade-python-perf | Nov 3, 2020 | Sep 9, 2020 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-kernelhuawei-euleros-2_0_sp3-upgrade-kernel-debuginfohuawei-euleros-2_0_sp3-upgrade-kernel-debuginfo-common-x86_64huawei-euleros-2_0_sp3-upgrade-kernel-develhuawei-euleros-2_0_sp3-upgrade-kernel-headershuawei-euleros-2_0_sp3-upgrade-kernel-toolshuawei-euleros-2_0_sp3-upgrade-kernel-tools-libshuawei-euleros-2_0_sp3-upgrade-perfhuawei-euleros-2_0_sp3-upgrade-python-perf | Jan 20, 2021 | Sep 9, 2020 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-kernelhuawei-euleros-2_0_sp5-upgrade-kernel-develhuawei-euleros-2_0_sp5-upgrade-kernel-headershuawei-euleros-2_0_sp5-upgrade-kernel-toolshuawei-euleros-2_0_sp5-upgrade-kernel-tools-libshuawei-euleros-2_0_sp5-upgrade-perfhuawei-euleros-2_0_sp5-upgrade-python-perf | Nov 2, 2020 | Sep 9, 2020 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-bpftoolhuawei-euleros-2_0_sp8-upgrade-kernelhuawei-euleros-2_0_sp8-upgrade-kernel-develhuawei-euleros-2_0_sp8-upgrade-kernel-headershuawei-euleros-2_0_sp8-upgrade-kernel-toolshuawei-euleros-2_0_sp8-upgrade-kernel-tools-libshuawei-euleros-2_0_sp8-upgrade-kernel-tools-libs-develhuawei-euleros-2_0_sp8-upgrade-perfhuawei-euleros-2_0_sp8-upgrade-python-perfhuawei-euleros-2_0_sp8-upgrade-python3-perf | Sep 29, 2020 | Sep 9, 2020 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-kernelhuawei-euleros-2_0_sp9-upgrade-kernel-toolshuawei-euleros-2_0_sp9-upgrade-kernel-tools-libshuawei-euleros-2_0_sp9-upgrade-python3-perf | Oct 13, 2020 | Sep 9, 2020 | |
| Oracle_linux | — | oracle-linux-upgrade-kerneloracle-linux-upgrade-kernel-uek | Oct 7, 2020 | Sep 9, 2020 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-kernelredhat-upgrade-kernel-rt | Oct 20, 2020 | Sep 9, 2020 | |
| Suse | — | suse-upgrade-kernel-defaultsuse-upgrade-kernel-default-extrasuse-upgrade-kernel-docssuse-upgrade-kernel-obs-build | Oct 11, 2020 | Sep 9, 2020 |
| Ubuntu | ubuntu-upgrade-linux-image-4-15-0-1056-oracleubuntu-upgrade-linux-image-4-15-0-1057-oracleubuntu-upgrade-linux-image-4-15-0-1072-gkeubuntu-upgrade-linux-image-4-15-0-1073-raspi2ubuntu-upgrade-linux-image-4-15-0-1077-kvmubuntu-upgrade-linux-image-4-15-0-1085-awsubuntu-upgrade-linux-image-4-15-0-1086-awsubuntu-upgrade-linux-image-4-15-0-1086-gcpubuntu-upgrade-linux-image-4-15-0-1089-snapdragonubuntu-upgrade-linux-image-4-15-0-1098-azureubuntu-upgrade-linux-image-4-15-0-1099-azureubuntu-upgrade-linux-image-4-15-0-1099-oemubuntu-upgrade-linux-image-4-15-0-120-genericubuntu-upgrade-linux-image-4-15-0-120-generic-lpaeubuntu-upgrade-linux-image-4-15-0-120-lowlatencyubuntu-upgrade-linux-image-4-15-0-121-genericubuntu-upgrade-linux-image-4-15-0-121-generic-lpaeubuntu-upgrade-linux-image-4-15-0-121-lowlatencyubuntu-upgrade-linux-image-4-4-0-1078-awsubuntu-upgrade-linux-image-4-4-0-1080-kvmubuntu-upgrade-linux-image-4-4-0-1114-awsubuntu-upgrade-linux-image-4-4-0-1139-raspi2ubuntu-upgrade-linux-image-4-4-0-1143-snapdragonubuntu-upgrade-linux-image-4-4-0-190-genericubuntu-upgrade-linux-image-4-4-0-190-generic-lpaeubuntu-upgrade-linux-image-4-4-0-190-lowlatencyubuntu-upgrade-linux-image-4-4-0-190-powerpc-e500mcubuntu-upgrade-linux-image-4-4-0-190-powerpc-smpubuntu-upgrade-linux-image-4-4-0-190-powerpc64-embubuntu-upgrade-linux-image-4-4-0-190-powerpc64-smpubuntu-upgrade-linux-image-5-4-0-1019-raspiubuntu-upgrade-linux-image-5-4-0-1024-kvmubuntu-upgrade-linux-image-5-4-0-1025-awsubuntu-upgrade-linux-image-5-4-0-1025-gcpubuntu-upgrade-linux-image-5-4-0-1025-oracleubuntu-upgrade-linux-image-5-4-0-1026-azureubuntu-upgrade-linux-image-5-4-0-48-genericubuntu-upgrade-linux-image-5-4-0-48-generic-lpaeubuntu-upgrade-linux-image-5-4-0-48-lowlatencyubuntu-upgrade-linux-image-5-6-0-1048-oemubuntu-upgrade-linux-image-awsubuntu-upgrade-linux-image-aws-hweubuntu-upgrade-linux-image-aws-lts-18-04ubuntu-upgrade-linux-image-azureubuntu-upgrade-linux-image-azure-lts-18-04ubuntu-upgrade-linux-image-gcpubuntu-upgrade-linux-image-gcp-lts-18-04ubuntu-upgrade-linux-image-genericubuntu-upgrade-linux-image-generic-hwe-16-04ubuntu-upgrade-linux-image-generic-hwe-18-04ubuntu-upgrade-linux-image-generic-lpaeubuntu-upgrade-linux-image-generic-lpae-hwe-16-04ubuntu-upgrade-linux-image-generic-lpae-hwe-18-04ubuntu-upgrade-linux-image-generic-lpae-lts-xenialubuntu-upgrade-linux-image-generic-lts-xenialubuntu-upgrade-linux-image-gkeubuntu-upgrade-linux-image-gke-4-15ubuntu-upgrade-linux-image-kvmubuntu-upgrade-linux-image-lowlatencyubuntu-upgrade-linux-image-lowlatency-hwe-16-04ubuntu-upgrade-linux-image-lowlatency-hwe-18-04ubuntu-upgrade-linux-image-lowlatency-lts-xenialubuntu-upgrade-linux-image-oemubuntu-upgrade-linux-image-oem-20-04ubuntu-upgrade-linux-image-oem-osp1ubuntu-upgrade-linux-image-oracleubuntu-upgrade-linux-image-oracle-lts-18-04ubuntu-upgrade-linux-image-powerpc-e500mcubuntu-upgrade-linux-image-powerpc-e500mc-lts-xenialubuntu-upgrade-linux-image-powerpc-smpubuntu-upgrade-linux-image-powerpc-smp-lts-xenialubuntu-upgrade-linux-image-powerpc64-embubuntu-upgrade-linux-image-powerpc64-emb-lts-xenialubuntu-upgrade-linux-image-powerpc64-smpubuntu-upgrade-linux-image-powerpc64-smp-lts-xenialubuntu-upgrade-linux-image-raspiubuntu-upgrade-linux-image-raspi-hwe-18-04ubuntu-upgrade-linux-image-raspi2ubuntu-upgrade-linux-image-snapdragonubuntu-upgrade-linux-image-snapdragon-hwe-18-04ubuntu-upgrade-linux-image-virtualubuntu-upgrade-linux-image-virtual-hwe-16-04ubuntu-upgrade-linux-image-virtual-hwe-18-04ubuntu-upgrade-linux-image-virtual-lts-xenial | Sep 22, 2020 | Sep 9, 2020 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Sep 9, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub