A TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local attackers to corrupt memory or possibly have unspecified other impact because a size check is in fs/nfs/nfs4proc.c instead of fs/nfs/nfs4xdr.c, aka CID-b4487b935452.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Sep 9, 2020 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-livepatch-4.14.198-152.320Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernelUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64 | Oct 2, 2020 | Sep 9, 2020 |
| Amazon_linux | — | Upgrade kernel | Oct 28, 2020 | Sep 9, 2020 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Oct 20, 2020 | Sep 9, 2020 |
| Debian | — | Upgrade linux | Sep 28, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-debug-develUpgrade perfUpgrade kernelUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-tools-libs | Nov 3, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernelUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade perf | Jan 20, 2021 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade perfUpgrade python-perf | Nov 2, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade kernelUpgrade python-perfUpgrade perfUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-devel | Sep 29, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Oct 13, 2020 | Sep 9, 2020 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 7, 2020 | Sep 9, 2020 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Oct 20, 2020 | Sep 9, 2020 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-default-extraUpgrade kernel-obs-build | Oct 11, 2020 | Sep 9, 2020 |
| Ubuntu | — | Upgrade linux-image-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-1085-awsUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.4.0-190-powerpc-smpUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.15.0-1086-awsUpgrade linux-image-virtualUpgrade linux-image-5.4.0-48-lowlatencyUpgrade linux-image-4.15.0-1073-raspi2Upgrade linux-image-4.4.0-190-powerpc-e500mcUpgrade linux-image-4.15.0-1072-gkeUpgrade linux-image-powerpc64-embUpgrade linux-image-4.15.0-121-lowlatencyUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-oracleUpgrade linux-image-5.4.0-48-genericUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-120-generic-lpaeUpgrade linux-image-4.4.0-190-genericUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-snapdragonUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.4.0-190-powerpc64-embUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1098-azureUpgrade linux-image-4.15.0-1086-gcpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-raspi2Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.4.0-48-generic-lpaeUpgrade linux-image-4.15.0-121-generic-lpaeUpgrade linux-image-4.4.0-1143-snapdragonUpgrade linux-image-powerpc64-smpUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1099-oemUpgrade linux-image-5.4.0-1025-gcpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.4.0-190-powerpc64-smpUpgrade linux-image-gkeUpgrade linux-image-4.4.0-190-lowlatencyUpgrade linux-image-5.4.0-1024-kvmUpgrade linux-image-gke-4.15Upgrade linux-image-5.4.0-1026-azureUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-5.6.0-1048-oemUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1114-awsUpgrade linux-image-powerpc-smpUpgrade linux-image-4.15.0-1057-oracleUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-azureUpgrade linux-image-raspiUpgrade linux-image-4.4.0-1078-awsUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-120-lowlatencyUpgrade linux-image-4.15.0-1077-kvmUpgrade linux-image-4.15.0-1099-azureUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1056-oracleUpgrade linux-image-oemUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.4.0-1080-kvmUpgrade linux-image-4.4.0-190-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-5.4.0-1025-awsUpgrade linux-image-4.15.0-1089-snapdragonUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1019-raspiUpgrade linux-image-5.4.0-1025-oracleUpgrade linux-image-4.15.0-121-genericUpgrade linux-image-4.4.0-1139-raspi2Upgrade linux-image-4.15.0-120-generic | Sep 22, 2020 | Sep 9, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 9, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub