A TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local attackers to corrupt memory or possibly have unspecified other impact because a size check is in fs/nfs/nfs4proc.c instead of fs/nfs/nfs4xdr.c, aka CID-b4487b935452.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Sep 9, 2020 |
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-livepatch-4.14.198-152.320Upgrade kernel-tools | Oct 2, 2020 | Sep 9, 2020 |
| Amazon_linux | — | Upgrade kernel | Oct 28, 2020 | Sep 9, 2020 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Oct 20, 2020 | Sep 9, 2020 |
| Debian | — | Upgrade linux | Sep 28, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernelUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-debug-develUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headers | Nov 3, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libsUpgrade perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-devel | Jan 20, 2021 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade python-perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel | Nov 2, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-develUpgrade kernel-tools-libs-develUpgrade perfUpgrade python-perfUpgrade kernel-toolsUpgrade kernelUpgrade python3-perfUpgrade kernel-headers | Sep 29, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Oct 13, 2020 | Sep 9, 2020 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 7, 2020 | Sep 9, 2020 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Oct 20, 2020 | Sep 9, 2020 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-default-extra | Oct 11, 2020 | Sep 9, 2020 |
| Ubuntu | — | Upgrade linux-image-snapdragonUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-5.4.0-1025-gcpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1073-raspi2Upgrade linux-image-raspi2Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.4.0-190-powerpc-e500mcUpgrade linux-image-4.15.0-1099-oemUpgrade linux-image-4.15.0-1072-gkeUpgrade linux-image-4.4.0-190-lowlatencyUpgrade linux-image-4.4.0-190-genericUpgrade linux-image-powerpc-e500mcUpgrade linux-image-5.4.0-1024-kvmUpgrade linux-image-4.4.0-1143-snapdragonUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-1098-azureUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-powerpc64-smpUpgrade linux-image-oem-20.04Upgrade linux-image-powerpc64-embUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-1086-awsUpgrade linux-image-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-190-powerpc-smpUpgrade linux-image-4.15.0-121-generic-lpaeUpgrade linux-image-4.15.0-121-lowlatencyUpgrade linux-image-4.15.0-1085-awsUpgrade linux-image-5.4.0-48-lowlatencyUpgrade linux-image-gke-4.15Upgrade linux-image-5.4.0-48-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-4.4.0-190-powerpc64-embUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-120-generic-lpaeUpgrade linux-image-5.4.0-48-genericUpgrade linux-image-4.15.0-1086-gcpUpgrade linux-image-virtualUpgrade linux-image-4.4.0-190-powerpc64-smpUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.4.0-1080-kvmUpgrade linux-image-genericUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1026-azureUpgrade linux-image-raspiUpgrade linux-image-4.15.0-1057-oracleUpgrade linux-image-4.4.0-1078-awsUpgrade linux-image-powerpc-smpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.15.0-1077-kvmUpgrade linux-image-5.4.0-1025-oracleUpgrade linux-image-azureUpgrade linux-image-lowlatencyUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-5.6.0-1048-oemUpgrade linux-image-4.15.0-1089-snapdragonUpgrade linux-image-5.4.0-1025-awsUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-190-generic-lpaeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-120-genericUpgrade linux-image-4.15.0-120-lowlatencyUpgrade linux-image-4.4.0-1139-raspi2Upgrade linux-image-gcpUpgrade linux-image-4.15.0-1099-azureUpgrade linux-image-oemUpgrade linux-image-4.15.0-1056-oracleUpgrade linux-image-aws-hweUpgrade linux-image-4.4.0-1114-awsUpgrade linux-image-5.4.0-1019-raspiUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-121-generic | Sep 22, 2020 | Sep 9, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 9, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub