A vulnerability was found in the Linux Kernel where the function sunkbd_reinit having been scheduled by sunkbd_interrupt before sunkbd being freed. Though the dangling pointer is set to NULL in sunkbd_disconnect, there is still an alias in sunkbd_reinit causing Use After Free.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade perfUpgrade python-perfUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-4.14.209-160.335Upgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernelUpgrade kernel-debuginfo-common-x86_64 | Dec 10, 2020 | Dec 10, 2020 |
| Amazon_linux | — | Upgrade kernel | Dec 19, 2020 | Nov 23, 2020 |
| Debian | — | Upgrade linux | Dec 7, 2020 | Dec 7, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-develUpgrade perfUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-debugUpgrade kernel-debug-devel | Sep 16, 2021 | May 26, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-headersUpgrade python-perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade kernel-devel | Apr 30, 2021 | Dec 14, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade kernel-toolsUpgrade kernel-develUpgrade python-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-headers | Mar 24, 2021 | Dec 14, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-headersUpgrade python-perfUpgrade kernel-sourceUpgrade kernel-develUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libs | Dec 15, 2020 | Dec 14, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-tools | Jan 5, 2021 | Dec 14, 2020 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-default-extra | Nov 27, 2020 | Nov 23, 2020 |
| Ubuntu | — | Upgrade linux-image-gke-5.4Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-powerpc-e500mcUpgrade linux-image-awsUpgrade linux-image-4.4.0-201-powerpc-smpUpgrade linux-image-5.8.0-44-generic-64kUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1012-dell300xUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1036-gkeUpgrade linux-image-4.4.0-201-generic-lpaeUpgrade linux-image-4.15.0-1079-raspi2Upgrade linux-image-4.4.0-201-lowlatencyUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-snapdragonUpgrade linux-image-5.4.0-1029-raspiUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-1087-kvmUpgrade linux-image-5.4.0-1033-kvmUpgrade linux-image-gke-4.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-5.4.0-1037-gcpUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-oemUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-powerpc64-smpUpgrade linux-image-5.8.0-44-genericUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-4.15.0-1093-gcpUpgrade linux-image-4.4.0-201-powerpc64-smpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1085-kvmUpgrade linux-image-5.4.0-1038-awsUpgrade linux-image-aws-hweUpgrade linux-image-5.8.0-1019-kvmUpgrade linux-image-4.15.0-136-generic-lpaeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-azureUpgrade linux-image-oem-20.04Upgrade linux-image-4.4.0-1121-awsUpgrade linux-image-4.15.0-136-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-5.8.0-1016-raspiUpgrade linux-image-4.4.0-1149-snapdragonUpgrade linux-image-gkeopUpgrade linux-image-5.8.0-1023-gcpUpgrade linux-image-5.4.0-1040-azureUpgrade linux-image-gkeUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.6.0-1053-oemUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-1145-raspi2Upgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1010-gkeopUpgrade linux-image-4.15.0-136-genericUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-66-genericUpgrade linux-image-5.8.0-1016-raspi-nolpaeUpgrade linux-image-4.15.0-1108-azureUpgrade linux-image-virtualUpgrade linux-image-powerpc-smpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-66-lowlatencyUpgrade linux-image-5.8.0-44-generic-lpaeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-4.4.0-201-genericUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.8.0-1021-oracleUpgrade linux-image-5.4.0-1038-oracleUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-5.4.0-66-generic-lpaeUpgrade linux-image-powerpc64-embUpgrade linux-image-5.8.0-44-lowlatencyUpgrade linux-image-gkeop-5.4Upgrade linux-image-dell300xUpgrade linux-image-4.15.0-1096-snapdragonUpgrade linux-image-4.15.0-1094-awsUpgrade linux-image-genericUpgrade linux-image-azure-lts-18.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.15.0-1079-gkeUpgrade linux-image-4.4.0-1085-awsUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1065-oracleUpgrade linux-image-5.8.0-1023-azureUpgrade linux-image-4.4.0-201-powerpc64-embUpgrade linux-image-4.4.0-201-powerpc-e500mcUpgrade linux-image-5.8.0-1024-awsUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-oem-osp1 | Jan 29, 2021 | Nov 23, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub