A flaw was found in the HDLC_PPP module of the Linux kernel in versions before 5.9-rc7. Memory corruption and a read overflow is caused by improper input validation in the ppp_cp_parse_cr function which can cause the system to crash or cause a denial of service. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Oct 6, 2020 |
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-livepatch-4.14.200-155.322Upgrade perfUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo | Oct 28, 2020 | Oct 6, 2020 |
| Amazon_linux | — | Upgrade kernel | Jul 14, 2023 | Oct 6, 2020 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Dec 21, 2020 | Oct 6, 2020 |
| Debian | — | Upgrade linux | Oct 21, 2020 | Oct 6, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade perfUpgrade kernelUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-tools | Nov 3, 2020 | Oct 6, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-tools-libsUpgrade perfUpgrade kernel | Jan 20, 2021 | Oct 6, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernel-headersUpgrade python-perfUpgrade kernelUpgrade perfUpgrade kernel-toolsUpgrade kernel-devel | Feb 3, 2021 | Oct 6, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade kernel-develUpgrade python3-perfUpgrade kernelUpgrade kernel-sourceUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-tools | Nov 3, 2020 | Oct 6, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Nov 3, 2020 | Oct 6, 2020 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Dec 17, 2020 | Sep 25, 2020 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Dec 21, 2020 | Oct 6, 2020 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-default-extraUpgrade kernel-docs | Feb 7, 2021 | Oct 6, 2020 |
| Ubuntu | — | Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-5.4.0-56-generic-lpaeUpgrade linux-image-4.15.0-126-lowlatencyUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-virtualUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1059-oracleUpgrade linux-image-powerpc64-embUpgrade linux-image-5.4.0-56-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1028-kvmUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-4.15.0-1100-azureUpgrade linux-image-5.4.0-1030-gcpUpgrade linux-image-gcpUpgrade linux-image-4.4.0-1082-awsUpgrade linux-image-5.4.0-1030-awsUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.4.0-1030-oracleUpgrade linux-image-raspi2Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.15.0-1091-snapdragonUpgrade linux-image-5.4.0-1032-azureUpgrade linux-image-azure-edgeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-oracleUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-197-powerpc64-embUpgrade linux-image-genericUpgrade linux-image-4.15.0-126-generic-lpaeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-1142-raspi2Upgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1023-raspiUpgrade linux-image-4.4.0-1084-kvmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.6.0-1048-oemUpgrade linux-image-4.15.0-1074-gkeUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-awsUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-197-powerpc-e500mcUpgrade linux-image-oemUpgrade linux-image-4.4.0-197-lowlatencyUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-1074-raspi2Upgrade linux-image-4.4.0-197-powerpc64-smpUpgrade linux-image-4.15.0-1079-kvmUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.4.0-197-powerpc-smpUpgrade linux-image-kvmUpgrade linux-image-powerpc64-smpUpgrade linux-image-snapdragonUpgrade linux-image-raspiUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-197-genericUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-oem-20.04Upgrade linux-image-azureUpgrade linux-image-4.15.0-1088-awsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-56-genericUpgrade linux-image-4.15.0-1103-oemUpgrade linux-image-gkeUpgrade linux-image-4.4.0-1118-awsUpgrade linux-image-gke-4.15Upgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-126-genericUpgrade linux-image-aws-hweUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.4.0-197-generic-lpaeUpgrade linux-image-4.15.0-1088-gcpUpgrade linux-image-4.4.0-1146-snapdragon | Dec 2, 2020 | Oct 6, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 6, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub