A vulnerability was found in the Linux Kernel where the function sunkbd_reinit having been scheduled by sunkbd_interrupt before sunkbd being freed. Though the dangling pointer is set to NULL in sunkbd_disconnect, there is still an alias in sunkbd_reinit causing Use After Free.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-livepatch-4.14.209-160.335Upgrade perfUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-devel | Dec 10, 2020 | Dec 10, 2020 |
| Amazon_linux | — | Upgrade kernel | Dec 19, 2020 | Nov 23, 2020 |
| Debian | — | Upgrade linux | Dec 7, 2020 | Dec 7, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-develUpgrade python-perf | Sep 16, 2021 | May 26, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernelUpgrade python-perfUpgrade kernel-debuginfo | Apr 30, 2021 | Dec 14, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-develUpgrade kernel-toolsUpgrade perf | Mar 24, 2021 | Dec 14, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-sourceUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-headersUpgrade perfUpgrade python3-perfUpgrade kernel-tools | Dec 15, 2020 | Dec 14, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | Jan 5, 2021 | Dec 14, 2020 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-obs-build | Nov 27, 2020 | Nov 23, 2020 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.8.0-1019-kvmUpgrade linux-image-gke-5.4Upgrade linux-image-4.15.0-136-generic-lpaeUpgrade linux-image-5.4.0-1033-kvmUpgrade linux-image-4.15.0-1079-raspi2Upgrade linux-image-5.8.0-44-genericUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-raspi-nolpaeUpgrade linux-image-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1036-gkeUpgrade linux-image-4.15.0-1085-kvmUpgrade linux-image-powerpc-e500mcUpgrade linux-image-powerpc64-smpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-snapdragonUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-1012-dell300xUpgrade linux-image-4.15.0-1093-gcpUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.8.0-44-generic-64kUpgrade linux-image-4.4.0-201-powerpc64-smpUpgrade linux-image-4.4.0-201-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-awsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gke-4.15Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-201-lowlatencyUpgrade linux-image-5.4.0-1038-awsUpgrade linux-image-oemUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1029-raspiUpgrade linux-image-aws-hweUpgrade linux-image-4.4.0-1087-kvmUpgrade linux-image-5.4.0-1037-gcpUpgrade linux-image-4.4.0-201-powerpc-smpUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.8.0-1021-oracleUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-201-powerpc-e500mcUpgrade linux-image-5.8.0-1016-raspiUpgrade linux-image-azureUpgrade linux-image-raspiUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.4.0-1145-raspi2Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.4.0-201-genericUpgrade linux-image-4.4.0-201-powerpc64-embUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-powerpc-smpUpgrade linux-image-5.4.0-1038-oracleUpgrade linux-image-4.4.0-1149-snapdragonUpgrade linux-image-5.8.0-44-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1040-azureUpgrade linux-image-4.4.0-1085-awsUpgrade linux-image-gkeop-5.4Upgrade linux-image-4.15.0-1079-gkeUpgrade linux-image-5.8.0-1016-raspi-nolpaeUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.15.0-1108-azureUpgrade linux-image-5.8.0-1023-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-5.6.0-1053-oemUpgrade linux-image-5.8.0-1024-awsUpgrade linux-image-oem-20.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-gkeopUpgrade linux-image-4.15.0-1065-oracleUpgrade linux-image-4.15.0-136-genericUpgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1010-gkeopUpgrade linux-image-5.4.0-66-genericUpgrade linux-image-5.4.0-66-generic-lpaeUpgrade linux-image-aws-lts-18.04Upgrade linux-image-powerpc64-embUpgrade linux-image-gcpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.8.0-1023-gcpUpgrade linux-image-5.4.0-66-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-4.15.0-136-lowlatencyUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-4.4.0-1121-awsUpgrade linux-image-dell300xUpgrade linux-image-raspi2Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-1094-awsUpgrade linux-image-5.8.0-44-generic-lpaeUpgrade linux-image-4.15.0-1096-snapdragon | Jan 29, 2021 | Nov 23, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub