A vulnerability was found in Linux Kernel where in the spk_ttyio_receive_buf2() function, it would dereference spk_ttyio_synth without checking whether it is NULL or not, and may lead to a NULL-ptr deref crash.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Feb 3, 2021 | Feb 3, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade python-perfUpgrade kernel-headersUpgrade kernel-source | Feb 2, 2021 | Jan 4, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Jan 5, 2021 | Jan 4, 2021 |
| Suse | — | Upgrade kernel-default | Jan 15, 2021 | Jan 12, 2021 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1040-azureUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.8.0-1016-raspiUpgrade linux-image-4.15.0-136-genericUpgrade linux-image-4.15.0-1094-awsUpgrade linux-image-virtualUpgrade linux-image-snapdragonUpgrade linux-image-5.8.0-1023-gcpUpgrade linux-image-5.4.0-66-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-5.4.0-1010-gkeopUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-1029-raspiUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.15.0-1079-gkeUpgrade linux-image-gcpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.8.0-1023-azureUpgrade linux-image-5.4.0-66-genericUpgrade linux-image-gkeUpgrade linux-image-5.8.0-1016-raspi-nolpaeUpgrade linux-image-oemUpgrade linux-image-oem-20.04Upgrade linux-image-5.8.0-44-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-azureUpgrade linux-image-4.15.0-1108-azureUpgrade linux-image-5.8.0-1021-oracleUpgrade linux-image-5.8.0-1024-awsUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-136-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-66-lowlatencyUpgrade linux-image-5.6.0-1053-oemUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-gkeopUpgrade linux-image-genericUpgrade linux-image-gkeop-5.4Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1038-oracleUpgrade linux-image-4.15.0-1065-oracleUpgrade linux-image-generic-64kUpgrade linux-image-dell300xUpgrade linux-image-4.15.0-1093-gcpUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1037-gcpUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1033-kvmUpgrade linux-image-oracleUpgrade linux-image-5.8.0-1019-kvmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.8.0-44-genericUpgrade linux-image-5.4.0-1036-gkeUpgrade linux-image-5.8.0-44-generic-64kUpgrade linux-image-4.15.0-136-generic-lpaeUpgrade linux-image-4.15.0-1012-dell300xUpgrade linux-image-4.15.0-1079-raspi2Upgrade linux-image-raspiUpgrade linux-image-5.8.0-44-lowlatencyUpgrade linux-image-gke-4.15Upgrade linux-image-4.15.0-1096-snapdragonUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1085-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-gke-5.4Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.4.0-1038-aws | Feb 26, 2021 | Jan 12, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 13, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub