fs/namei.c in the Linux kernel before 5.5 has a may_create_in_sticky use-after-free, which allows local users to cause a denial of service (OOPS) or possibly obtain sensitive information from kernel memory, aka CID-d0cb50185ae9. One attack vector may be an open system call for a UNIX domain socket, if the socket is being moved to a new parent directory and its old parent directory is being removed.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Apr 30, 2020 | Jan 29, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade kernel-develUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-sourceUpgrade python-perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libs | Mar 24, 2020 | Jan 29, 2020 |
| Suse | — | Upgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-default | Mar 3, 2020 | Jan 29, 2020 |
| Ubuntu | — | Upgrade linux-image-5.3.0-46-snapdragonUpgrade linux-image-oracle-edgeUpgrade linux-image-4.15.0-1076-snapdragonUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-5.3.0-1019-azureUpgrade linux-image-4.15.0-96-generic-lpaeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.0.0-1047-oem-osp1Upgrade linux-image-4.15.0-1065-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1060-raspi2Upgrade linux-image-4.4.0-1135-snapdragonUpgrade linux-image-kvmUpgrade linux-image-4.15.0-96-lowlatencyUpgrade linux-image-4.4.0-177-powerpc-e500mcUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.0.0-1033-gkeUpgrade linux-image-4.4.0-1065-awsUpgrade linux-image-5.3.0-1017-gcpUpgrade linux-image-gcp-edgeUpgrade linux-image-4.15.0-96-genericUpgrade linux-image-gcpUpgrade linux-image-5.3.0-1014-oracleUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.15.0-1060-gcpUpgrade linux-image-4.15.0-1077-azureUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-azure-edgeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.4.0-1069-kvmUpgrade linux-image-virtualUpgrade linux-image-4.4.0-177-powerpc64-smpUpgrade linux-image-5.0.0-1036-azureUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-gke-5.0Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-raspi2Upgrade linux-image-4.4.0-177-powerpc64-embUpgrade linux-image-5.3.0-46-lowlatencyUpgrade linux-image-powerpc-smpUpgrade linux-image-oem-osp1Upgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-177-lowlatencyUpgrade linux-image-5.0.0-1014-oracleUpgrade linux-image-4.15.0-1058-kvmUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-oracleUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-gke-4.15Upgrade linux-image-4.4.0-177-genericUpgrade linux-image-4.15.0-1037-oracleUpgrade linux-image-4.4.0-1105-awsUpgrade linux-image-5.3.0-1022-raspi2Upgrade linux-image-generic-lts-xenialUpgrade linux-image-awsUpgrade linux-image-5.3.0-46-genericUpgrade linux-image-azureUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-snapdragonUpgrade linux-image-5.3.0-46-generic-lpaeUpgrade linux-image-5.0.0-1034-gcpUpgrade linux-image-5.3.0-1015-kvmUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-177-powerpc-smpUpgrade linux-image-4.4.0-1131-raspi2Upgrade linux-image-5.3.0-1016-awsUpgrade linux-image-powerpc64-smpUpgrade linux-image-lowlatencyUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-4.15.0-1057-gkeUpgrade linux-image-aws-hweUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-1079-oemUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-177-generic-lpae | Apr 7, 2020 | Jan 29, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 28, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub