A vulnerability was found in the Linux Kernel where the function sunkbd_reinit having been scheduled by sunkbd_interrupt before sunkbd being freed. Though the dangling pointer is set to NULL in sunkbd_disconnect, there is still an alias in sunkbd_reinit causing Use After Free.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-4.14.209-160.335Upgrade kernel-debuginfo | Dec 10, 2020 | Dec 10, 2020 |
| Amazon_linux | — | Upgrade kernel | Dec 19, 2020 | Nov 23, 2020 |
| Debian | — | Upgrade linux | Dec 7, 2020 | Dec 7, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade perfUpgrade python-perfUpgrade kernel-devel | Sep 16, 2021 | May 26, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf | Apr 30, 2021 | Dec 14, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libsUpgrade python-perfUpgrade perfUpgrade kernel-toolsUpgrade kernel-devel | Mar 24, 2021 | Dec 14, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade bpftoolUpgrade kernel-develUpgrade kernel-sourceUpgrade python-perfUpgrade kernel-tools-libsUpgrade python3-perfUpgrade perfUpgrade kernel-toolsUpgrade kernel-headers | Dec 15, 2020 | Dec 14, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perf | Jan 5, 2021 | Dec 14, 2020 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-docs | Nov 27, 2020 | Nov 23, 2020 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1096-snapdragonUpgrade linux-image-4.4.0-1145-raspi2Upgrade linux-image-powerpc64-embUpgrade linux-image-4.15.0-136-lowlatencyUpgrade linux-image-5.8.0-1021-oracleUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-powerpc-smpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-raspi2Upgrade linux-image-5.4.0-66-generic-lpaeUpgrade linux-image-5.4.0-66-lowlatencyUpgrade linux-image-4.4.0-201-genericUpgrade linux-image-5.4.0-1038-oracleUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-aws-lts-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-1079-gkeUpgrade linux-image-4.15.0-1094-awsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-66-genericUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1040-azureUpgrade linux-image-5.8.0-1023-gcpUpgrade linux-image-gkeUpgrade linux-image-raspiUpgrade linux-image-4.15.0-136-genericUpgrade linux-image-4.4.0-1149-snapdragonUpgrade linux-image-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.8.0-44-lowlatencyUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-azureUpgrade linux-image-4.4.0-1121-awsUpgrade linux-image-5.8.0-44-generic-lpaeUpgrade linux-image-5.8.0-1024-awsUpgrade linux-image-5.8.0-1016-raspi-nolpaeUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-5.4.0-1010-gkeopUpgrade linux-image-dell300xUpgrade linux-image-azure-lts-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-virtualUpgrade linux-image-4.4.0-201-powerpc-e500mcUpgrade linux-image-4.4.0-201-powerpc64-embUpgrade linux-image-5.8.0-1023-azureUpgrade linux-image-genericUpgrade linux-image-oem-20.04Upgrade linux-image-5.8.0-1016-raspiUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.15.0-1065-oracleUpgrade linux-image-4.4.0-1085-awsUpgrade linux-image-4.15.0-1108-azureUpgrade linux-image-5.6.0-1053-oemUpgrade linux-image-gkeopUpgrade linux-image-oemUpgrade linux-image-5.4.0-1038-awsUpgrade linux-image-4.15.0-1093-gcpUpgrade linux-image-oracleUpgrade linux-image-4.4.0-201-powerpc-smpUpgrade linux-image-4.15.0-1012-dell300xUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc64-smpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1037-gcpUpgrade linux-image-4.15.0-1085-kvmUpgrade linux-image-aws-hweUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-201-lowlatencyUpgrade linux-image-5.4.0-1029-raspiUpgrade linux-image-5.8.0-44-genericUpgrade linux-image-5.8.0-1019-kvmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gke-4.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-4.4.0-201-powerpc64-smpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-snapdragonUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-4.15.0-136-generic-lpaeUpgrade linux-image-5.4.0-1033-kvmUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-1087-kvmUpgrade linux-image-5.4.0-1036-gkeUpgrade linux-image-kvmUpgrade linux-image-4.4.0-201-generic-lpaeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-gke-5.4Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.8.0-44-generic-64kUpgrade linux-image-4.15.0-1079-raspi2Upgrade linux-image-powerpc-e500mcUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-aws | Jan 29, 2021 | Nov 23, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub