The rbd block device driver in drivers/block/rbd.c in the Linux kernel through 5.8.9 used incomplete permission checking for access to rbd devices, which could be leveraged by local attackers to map or unmap rbd block devices, aka CID-f44d04e696fe.
CVSS Details
- CVSS 3.1 Base Score: 4.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Sep 13, 2020 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-4.14.198-152.320Upgrade kernel-tools-develUpgrade perfUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-4.14.192-147.314Upgrade kernel-livepatch-4.14.198-152.320-debuginfoUpgrade python-perfUpgrade kernel-livepatch-4.14.192-147.314-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-4.14.193-149.317Upgrade kernel-livepatch-4.14.193-149.317-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.200-155.322 | Oct 28, 2020 | Sep 13, 2020 |
| Amazon_linux | — | Upgrade kernel | Oct 28, 2020 | Sep 13, 2020 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Jun 1, 2021 | Sep 13, 2020 |
| Debian | — | Upgrade linux | Sep 28, 2020 | Sep 13, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernel-debug | Nov 3, 2020 | Sep 13, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade perfUpgrade python-perfUpgrade kernel-tools | Jan 20, 2021 | Sep 13, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernelUpgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernel-devel | Dec 16, 2020 | Sep 13, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade perfUpgrade kernelUpgrade python-perfUpgrade kernel-headersUpgrade kernel-tools-libs-devel | Sep 29, 2020 | Sep 13, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel | Oct 13, 2020 | Sep 13, 2020 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 7, 2020 | Sep 13, 2020 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | May 21, 2021 | Sep 13, 2020 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-obs-build | Oct 2, 2020 | Sep 13, 2020 |
| Ubuntu | — | Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.4.0-197-powerpc64-smpUpgrade linux-image-awsUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.4.0-197-lowlatencyUpgrade linux-image-snapdragonUpgrade linux-image-powerpc64-smpUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oem-osp1Upgrade linux-image-aws-hweUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gke-4.15Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.4.0-1030-gcpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.4.0-197-genericUpgrade linux-image-oemUpgrade linux-image-gkeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-4.4.0-1084-kvmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-raspiUpgrade linux-image-oracleUpgrade linux-image-azureUpgrade linux-image-4.4.0-197-generic-lpaeUpgrade linux-image-oem-20.04Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-5.4.0-56-genericUpgrade linux-image-4.15.0-1074-gkeUpgrade linux-image-4.15.0-1088-awsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-4.4.0-1118-awsUpgrade linux-image-kvmUpgrade linux-image-5.4.0-56-lowlatencyUpgrade linux-image-4.15.0-1074-raspi2Upgrade linux-image-4.15.0-1103-oemUpgrade linux-image-4.15.0-126-genericUpgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc-smpUpgrade linux-image-virtualUpgrade linux-image-4.4.0-197-powerpc-e500mcUpgrade linux-image-4.4.0-1146-snapdragonUpgrade linux-image-5.4.0-1023-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-azure-edgeUpgrade linux-image-4.15.0-126-generic-lpaeUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-raspi2Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.4.0-1142-raspi2Upgrade linux-image-5.4.0-1032-azureUpgrade linux-image-5.4.0-56-generic-lpaeUpgrade linux-image-4.15.0-1100-azureUpgrade linux-image-5.4.0-1030-awsUpgrade linux-image-5.6.0-1048-oemUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-197-powerpc-smpUpgrade linux-image-4.15.0-1059-oracleUpgrade linux-image-4.4.0-197-powerpc64-embUpgrade linux-image-4.15.0-1091-snapdragonUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1030-oracleUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-gcpUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-4.4.0-1082-awsUpgrade linux-image-4.15.0-126-lowlatencyUpgrade linux-image-4.15.0-1088-gcpUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-5.4.0-1028-kvmUpgrade linux-image-4.15.0-1079-kvm | Dec 2, 2020 | Sep 13, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 13, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub