An issue was discovered in romfs_dev_read in fs/romfs/storage.c in the Linux kernel before 5.8.4. Uninitialized memory leaks to userspace, aka CID-bcf85fcedfdd.
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 28, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-headersUpgrade kernel-debug-develUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernelUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64 | Feb 22, 2021 | Nov 28, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-develUpgrade kernelUpgrade perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-tools-libs | Jan 20, 2021 | Nov 28, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python-perfUpgrade kernel-headersUpgrade perfUpgrade kernel-develUpgrade kernel-tools | Mar 24, 2021 | Nov 28, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-sourceUpgrade python-perf | Dec 15, 2020 | Nov 28, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Jan 5, 2021 | Nov 28, 2020 |
| Suse | — | Upgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-default | Dec 11, 2020 | Nov 28, 2020 |
| Ubuntu | — | Upgrade linux-image-5.6.0-1048-oemUpgrade linux-image-oem-20.04 | Feb 26, 2021 | Nov 28, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub