A flaw was found in the Linux kernel’s implementation of MIDI, where an attacker with a local account and the permissions to issue ioctl commands to midi devices could trigger a use-after-free issue. A write to this specific memory while freed and before use causes the flow of execution to change and possibly allow for memory corruption or privilege escalation. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Dec 11, 2020 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Jun 1, 2021 | Dec 11, 2020 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Dec 11, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-headersUpgrade perfUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel | Feb 22, 2021 | Dec 11, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-toolsUpgrade kernel-headersUpgrade kernelUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-devel | May 25, 2022 | Dec 11, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel | Mar 24, 2021 | Dec 11, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade python3-perfUpgrade perfUpgrade bpftoolUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-sourceUpgrade python-perf | Feb 2, 2021 | Dec 11, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Jan 5, 2021 | Dec 11, 2020 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Feb 4, 2021 | Dec 2, 2020 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | May 21, 2021 | Dec 11, 2020 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-default-extraUpgrade kernel-obs-build | Jan 13, 2021 | Dec 11, 2020 |
| Ubuntu | — | Upgrade linux-gke-5.3Upgrade linux-oem-5.6Upgrade linux-azure-fipsUpgrade linux-awsUpgrade linux-lts-xenialUpgrade linux-azure-fde-5.15Upgrade linuxUpgrade linux-gke-4.15Upgrade linux-oem-osp1Upgrade linux-raspi2-5.3Upgrade linux-snapdragonUpgrade linux-oracleUpgrade linux-kvmUpgrade linux-raspiUpgrade linux-hwe-5.4Upgrade linux-azureUpgrade linux-raspi2Upgrade linux-gcpUpgrade linux-hweUpgrade linux-gcp-4.15Upgrade linux-fipsUpgrade linux-azure-4.15Upgrade linux-riscvUpgrade linux-aws-fipsUpgrade linux-aws-hweUpgrade linux-gke-5.0 | Nov 19, 2024 | Dec 11, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub