The rbd block device driver in drivers/block/rbd.c in the Linux kernel through 5.8.9 used incomplete permission checking for access to rbd devices, which could be leveraged by local attackers to map or unmap rbd block devices, aka CID-f44d04e696fe.
CVSS Details
- CVSS 3.1 Base Score: 4.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Sep 13, 2020 |
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-4.14.198-152.320Upgrade kernel-livepatch-4.14.192-147.314Upgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-4.14.192-147.314-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.200-155.322Upgrade python-perfUpgrade kernel-livepatch-4.14.193-149.317-debuginfoUpgrade kernel-livepatch-4.14.193-149.317Upgrade kernel-livepatch-4.14.198-152.320-debuginfo | Oct 28, 2020 | Sep 13, 2020 |
| Amazon_linux | — | Upgrade kernel | Oct 28, 2020 | Sep 13, 2020 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Jun 1, 2021 | Sep 13, 2020 |
| Debian | — | Upgrade linux | Sep 28, 2020 | Sep 13, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-debugUpgrade python-perfUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel | Nov 3, 2020 | Sep 13, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade python-perfUpgrade kernel-toolsUpgrade perf | Jan 20, 2021 | Sep 13, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade python-perf | Dec 16, 2020 | Sep 13, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade python-perfUpgrade kernelUpgrade kernel-headersUpgrade kernel-tools-libs-devel | Sep 29, 2020 | Sep 13, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | Oct 13, 2020 | Sep 13, 2020 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 7, 2020 | Sep 13, 2020 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | May 21, 2021 | Sep 13, 2020 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-obs-build | Oct 2, 2020 | Sep 13, 2020 |
| Ubuntu | — | Upgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-1082-awsUpgrade linux-image-4.15.0-1100-azureUpgrade linux-image-genericUpgrade linux-image-4.4.0-197-powerpc-smpUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-4.4.0-1142-raspi2Upgrade linux-image-4.15.0-1079-kvmUpgrade linux-image-4.15.0-126-lowlatencyUpgrade linux-image-azure-edgeUpgrade linux-image-4.15.0-1088-gcpUpgrade linux-image-5.6.0-1048-oemUpgrade linux-image-5.4.0-56-generic-lpaeUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-powerpc64-embUpgrade linux-image-powerpc-e500mcUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1030-awsUpgrade linux-image-5.4.0-1032-azureUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-raspi2Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-1091-snapdragonUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1030-oracleUpgrade linux-image-4.4.0-197-powerpc64-embUpgrade linux-image-4.15.0-1059-oracleUpgrade linux-image-5.4.0-1023-raspiUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-126-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-4.4.0-1146-snapdragonUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-197-powerpc-e500mcUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-5.4.0-1028-kvmUpgrade linux-image-4.4.0-197-lowlatencyUpgrade linux-image-5.4.0-56-genericUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-raspiUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.4.0-1030-gcpUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.4.0-1084-kvmUpgrade linux-image-awsUpgrade linux-image-powerpc64-smpUpgrade linux-image-kvmUpgrade linux-image-aws-lts-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-4.15.0-126-genericUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-azureUpgrade linux-image-oem-20.04Upgrade linux-image-4.4.0-197-generic-lpaeUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-1074-gkeUpgrade linux-image-4.15.0-1103-oemUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oracleUpgrade linux-image-snapdragonUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-4.4.0-1118-awsUpgrade linux-image-4.15.0-1074-raspi2Upgrade linux-image-4.15.0-1088-awsUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-56-lowlatencyUpgrade linux-image-4.4.0-197-powerpc64-smpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-aws-hweUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gke-4.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-oemUpgrade linux-image-4.4.0-197-generic | Dec 2, 2020 | Sep 13, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 13, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub