An issue was discovered in the Linux kernel before 5.10. drivers/infiniband/core/ucma.c has a use-after-free because the ctx is reached via the ctx_list in some ucma_migrate_id situations where ucma_close is called, aka CID-f5449e74802c.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Jun 7, 2021 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1160_31_1-debuginfoUpgrade kpatch-patch-4_18_0-305_10_2Upgrade kpatch-patch-4_18_0-305_3_1-debugsourceUpgrade kpatch-patch-4_18_0-305_12_1-debugsourceUpgrade kpatch-patch-4_18_0-305_7_1Upgrade kpatch-patch-3_10_0-1160_42_2Upgrade kernel-rtUpgrade kpatch-patch-4_18_0-305_17_1Upgrade kpatch-patch-4_18_0-305_19_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_45_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_15_2Upgrade kpatch-patch-4_18_0-305_19_1-debugsourceUpgrade kpatch-patch-4_18_0-305_3_1Upgrade kpatch-patch-3_10_0-1160_45_1Upgrade kpatch-patch-4_18_0-305_17_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_31_1Upgrade kpatch-patch-4_18_0-305_19_1Upgrade kpatch-patch-3_10_0-1160_41_1Upgrade kpatch-patch-4_18_0-305_3_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_25_1Upgrade kpatch-patch-4_18_0-305_12_1Upgrade kpatch-patch-4_18_0-305-debuginfoUpgrade kpatch-patch-4_18_0-305_17_1-debugsourceUpgrade kernelUpgrade kpatch-patch-3_10_0-1160_25_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_36_2-debuginfoUpgrade kpatch-patch-3_10_0-1160_15_2-debuginfoUpgrade kpatch-patch-3_10_0-1160_42_2-debuginfoUpgrade kpatch-patch-4_18_0-305_10_2-debugsourceUpgrade kpatch-patch-4_18_0-305_12_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_11_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_36_2Upgrade kpatch-patch-4_18_0-305_10_2-debuginfoUpgrade kpatch-patch-3_10_0-1160_11_1Upgrade kpatch-patch-4_18_0-305_7_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_21_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_21_1Upgrade kpatch-patch-4_18_0-305_7_1-debugsourceUpgrade kpatch-patch-4_18_0-305Upgrade kpatch-patch-3_10_0-1160_41_1-debuginfoUpgrade kpatch-patch-4_18_0-305-debugsourceUpgrade kpatch-patch-3_10_0-1160_24_1Upgrade kpatch-patch-3_10_0-1160_24_1-debuginfo | Nov 9, 2021 | Jun 7, 2021 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 7, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernelUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64 | Oct 26, 2021 | Jun 7, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python-perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade perfUpgrade kernel-devel | Sep 29, 2021 | Jun 7, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-develUpgrade kernel-sourceUpgrade kernel-headersUpgrade perf | Sep 24, 2021 | Jun 7, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Sep 29, 2021 | Jun 7, 2021 |
| Oracle_linux | — | Upgrade kernel | Nov 3, 2021 | Jun 7, 2021 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Nov 9, 2021 | Jun 7, 2021 |
| Rocky_linux | — | Upgrade kernel-tools-libsUpgrade kernel-tools-libs-develUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debugUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perfUpgrade kernel-rt-develUpgrade kernel-rtUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-modulesUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-develUpgrade kernel-debuginfoUpgrade kernel-rt-coreUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade bpftool-debuginfoUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modules-extraUpgrade perf-debuginfoUpgrade kernel-debugUpgrade kernel-rt-debug-modules | May 5, 2022 | Jun 7, 2021 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-obs-build | Jul 1, 2021 | Jun 7, 2021 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1115-awsUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1021-bluefieldUpgrade linux-image-azure-lts-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.4.0-222-genericUpgrade linux-image-aws-lts-18.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1046-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-162-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.4.0-90-genericUpgrade linux-image-4.4.0-1102-awsUpgrade linux-image-5.4.0-1007-ibmUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-awsUpgrade linux-image-oemUpgrade linux-image-oracleUpgrade linux-image-raspiUpgrade linux-image-4.15.0-1111-gcpUpgrade linux-image-4.4.0-1138-awsUpgrade linux-image-5.4.0-1059-awsUpgrade linux-image-azureUpgrade linux-image-4.15.0-1083-oracleUpgrade linux-image-snapdragonUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-gke-5.4Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-162-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-aws-hweUpgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1063-azureUpgrade linux-image-gkeop-5.4Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-162-generic-lpaeUpgrade linux-image-4.15.0-1115-snapdragonUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-1030-dell300xUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-gkeopUpgrade linux-image-4.4.0-222-lowlatencyUpgrade linux-image-5.4.0-1057-gcpUpgrade linux-image-5.4.0-1055-gkeUpgrade linux-image-gkeUpgrade linux-image-5.4.0-1026-gkeopUpgrade linux-image-5.4.0-1057-oracleUpgrade linux-image-oem-osp1Upgrade linux-image-genericUpgrade linux-image-5.4.0-1049-kvmUpgrade linux-image-gcpUpgrade linux-image-kvmUpgrade linux-image-5.4.0-90-generic-lpaeUpgrade linux-image-4.15.0-1102-kvmUpgrade linux-image-4.15.0-1126-azureUpgrade linux-image-4.15.0-1098-raspi2Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-dell300xUpgrade linux-image-5.4.0-90-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-4.4.0-1103-kvmUpgrade linux-image-gcp-lts-20.04 | Nov 9, 2021 | Jun 7, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 7, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub