An issue was discovered in romfs_dev_read in fs/romfs/storage.c in the Linux kernel before 5.8.4. Uninitialized memory leaks to userspace, aka CID-bcf85fcedfdd.
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 28, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-debugUpgrade perfUpgrade kernel-develUpgrade kernelUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libs | Feb 22, 2021 | Nov 28, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade python-perfUpgrade perfUpgrade kernel-develUpgrade kernelUpgrade kernel-headers | Jan 20, 2021 | Nov 28, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade kernel-toolsUpgrade perfUpgrade kernel-headersUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel | Mar 24, 2021 | Nov 28, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade perfUpgrade python3-perfUpgrade kernel-headersUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-source | Dec 15, 2020 | Nov 28, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-tools | Jan 5, 2021 | Nov 28, 2020 |
| Suse | — | Upgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade ocfs2-kmp-default | Dec 11, 2020 | Nov 28, 2020 |
| Ubuntu | — | Upgrade linux-image-5.6.0-1048-oemUpgrade linux-image-oem-20.04 | Feb 26, 2021 | Nov 28, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub