A flaw was found in the HDLC_PPP module of the Linux kernel in versions before 5.9-rc7. Memory corruption and a read overflow is caused by improper input validation in the ppp_cp_parse_cr function which can cause the system to crash or cause a denial of service. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Oct 6, 2020 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-livepatch-4.14.200-155.322Upgrade perfUpgrade kernelUpgrade python-perf-debuginfo | Oct 28, 2020 | Oct 6, 2020 |
| Amazon_linux | — | Upgrade kernel | Jul 14, 2023 | Oct 6, 2020 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Dec 21, 2020 | Oct 6, 2020 |
| Debian | — | Upgrade linux | Oct 21, 2020 | Oct 6, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfoUpgrade perfUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernelUpgrade kernel-debugUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools | Nov 3, 2020 | Oct 6, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headers | Jan 20, 2021 | Oct 6, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernelUpgrade python-perf | Feb 3, 2021 | Oct 6, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade python3-perfUpgrade kernel-develUpgrade kernelUpgrade bpftoolUpgrade kernel-sourceUpgrade kernel-headersUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Nov 3, 2020 | Oct 6, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Nov 3, 2020 | Oct 6, 2020 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Dec 17, 2020 | Sep 25, 2020 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Dec 21, 2020 | Oct 6, 2020 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-docs | Feb 7, 2021 | Oct 6, 2020 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-powerpc64-smpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-1074-gkeUpgrade linux-image-5.4.0-56-genericUpgrade linux-image-4.4.0-197-genericUpgrade linux-image-4.4.0-1084-kvmUpgrade linux-image-kvmUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-awsUpgrade linux-image-4.15.0-126-genericUpgrade linux-image-raspiUpgrade linux-image-4.4.0-197-powerpc-smpUpgrade linux-image-4.4.0-197-generic-lpaeUpgrade linux-image-aws-hweUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oemUpgrade linux-image-4.4.0-1146-snapdragonUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1074-raspi2Upgrade linux-image-4.15.0-1088-awsUpgrade linux-image-4.15.0-1088-gcpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-197-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.15.0-1103-oemUpgrade linux-image-gke-4.15Upgrade linux-image-gkeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.4.0-197-powerpc-e500mcUpgrade linux-image-4.4.0-1118-awsUpgrade linux-image-azureUpgrade linux-image-4.4.0-197-powerpc64-smpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.6.0-1048-oemUpgrade linux-image-4.15.0-1079-kvmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-oem-20.04Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-126-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1059-oracleUpgrade linux-image-oracleUpgrade linux-image-5.4.0-1032-azureUpgrade linux-image-4.4.0-1142-raspi2Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-powerpc-smpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.15.0-126-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-virtualUpgrade linux-image-5.4.0-56-generic-lpaeUpgrade linux-image-5.4.0-56-lowlatencyUpgrade linux-image-4.4.0-197-powerpc64-embUpgrade linux-image-4.15.0-1100-azureUpgrade linux-image-5.4.0-1030-oracleUpgrade linux-image-raspi2Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.4.0-1082-awsUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-powerpc-e500mcUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1023-raspiUpgrade linux-image-4.15.0-1091-snapdragonUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-5.4.0-1030-gcpUpgrade linux-image-5.4.0-1028-kvmUpgrade linux-image-oem-osp1Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.4.0-1030-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc64-embUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-azure-edge | Dec 2, 2020 | Oct 6, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 6, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub