A Use After Free vulnerability in Fedora Linux kernel 5.9.0-rc9 allows attackers to obatin sensitive information via vgacon_invert_region() function.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernelUpgrade kernel-livepatch-4.14.173-137.228Upgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-toolsUpgrade python-perf-debuginfo | Dec 5, 2023 | Aug 22, 2023 |
| Amazon_linux | — | Upgrade kernel | Dec 5, 2023 | Apr 23, 2020 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Aug 22, 2023 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 22, 2023 |
| Ubuntu | — | Upgrade linux-awsUpgrade linuxUpgrade linux-gcpUpgrade linux-fipsUpgrade linux-lts-xenialUpgrade linux-oem-osp1Upgrade linux-aws-hweUpgrade linux-kvmUpgrade linux-aws-fipsUpgrade linux-azureUpgrade linux-hweUpgrade linux-oracleUpgrade linux-azure-fips | Nov 19, 2024 | Aug 22, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub