A TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local attackers to corrupt memory or possibly have unspecified other impact because a size check is in fs/nfs/nfs4proc.c instead of fs/nfs/nfs4xdr.c, aka CID-b4487b935452.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Sep 9, 2020 |
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-livepatch-4.14.198-152.320Upgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo | Oct 2, 2020 | Sep 9, 2020 |
| Amazon_linux | — | Upgrade kernel | Oct 28, 2020 | Sep 9, 2020 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Oct 20, 2020 | Sep 9, 2020 |
| Debian | — | Upgrade linux | Sep 28, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-headersUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernelUpgrade perf | Nov 3, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade perfUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64 | Jan 20, 2021 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-devel | Nov 2, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade perfUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade python-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-develUpgrade kernel-tools-libs | Sep 29, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Oct 13, 2020 | Sep 9, 2020 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 7, 2020 | Sep 9, 2020 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Oct 20, 2020 | Sep 9, 2020 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-default | Oct 11, 2020 | Sep 9, 2020 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1056-oracleUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-1099-azureUpgrade linux-image-oemUpgrade linux-image-4.15.0-1077-kvmUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-aws-hweUpgrade linux-image-5.6.0-1048-oemUpgrade linux-image-5.4.0-1025-oracleUpgrade linux-image-5.4.0-1025-awsUpgrade linux-image-lowlatencyUpgrade linux-image-azureUpgrade linux-image-4.4.0-1139-raspi2Upgrade linux-image-4.4.0-1114-awsUpgrade linux-image-5.4.0-1019-raspiUpgrade linux-image-4.4.0-1078-awsUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-1080-kvmUpgrade linux-image-4.15.0-120-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1026-azureUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-powerpc-smpUpgrade linux-image-azure-lts-18.04Upgrade linux-image-gcpUpgrade linux-image-4.15.0-1089-snapdragonUpgrade linux-image-4.15.0-1057-oracleUpgrade linux-image-4.15.0-121-genericUpgrade linux-image-4.15.0-120-genericUpgrade linux-image-oem-osp1Upgrade linux-image-4.4.0-190-generic-lpaeUpgrade linux-image-4.4.0-190-powerpc-e500mcUpgrade linux-image-virtualUpgrade linux-image-gke-4.15Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-raspi2Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-oem-20.04Upgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-190-genericUpgrade linux-image-kvmUpgrade linux-image-4.4.0-190-powerpc-smpUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-1098-azureUpgrade linux-image-4.4.0-190-powerpc64-embUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.4.0-48-genericUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.15.0-1086-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-190-lowlatencyUpgrade linux-image-powerpc64-embUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-48-generic-lpaeUpgrade linux-image-5.4.0-1024-kvmUpgrade linux-image-4.15.0-1085-awsUpgrade linux-image-4.4.0-190-powerpc64-smpUpgrade linux-image-4.15.0-121-lowlatencyUpgrade linux-image-4.15.0-1086-awsUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-1073-raspi2Upgrade linux-image-awsUpgrade linux-image-4.15.0-1072-gkeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1025-gcpUpgrade linux-image-oracleUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1099-oemUpgrade linux-image-aws-lts-18.04Upgrade linux-image-gkeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-121-generic-lpaeUpgrade linux-image-4.4.0-1143-snapdragonUpgrade linux-image-5.4.0-48-lowlatencyUpgrade linux-image-4.15.0-120-generic-lpae | Sep 22, 2020 | Sep 9, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 9, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub