An issue was discovered in the Linux kernel before 5.9.3. io_uring takes a non-refcounted reference to the files_struct of the process that submitted a request, causing execve() to incorrectly optimize unshare_fd(), aka CID-0f2122045b94.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Dec 3, 2020 |
| Ubuntu | — | Upgrade linux-image-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-5.8.0-1015-gcpUpgrade linux-image-5.8.0-34-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-5.8.0-1011-raspiUpgrade linux-image-virtualUpgrade linux-image-gkeUpgrade linux-image-azureUpgrade linux-image-generic-64kUpgrade linux-image-5.8.0-34-generic-lpaeUpgrade linux-image-raspiUpgrade linux-image-5.8.0-34-generic-64kUpgrade linux-image-5.8.0-1017-awsUpgrade linux-image-5.8.0-1011-raspi-nolpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.8.0-1016-azureUpgrade linux-image-5.8.0-1014-kvmUpgrade linux-image-genericUpgrade linux-image-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-5.8.0-1014-oracleUpgrade linux-image-5.8.0-34-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04 | Jan 6, 2021 | Dec 3, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub