An issue was discovered in the Linux kernel through 5.11.3. A kernel pointer leak can be used to determine the address of the iscsi_transport structure. When an iSCSI transport is registered with the iSCSI subsystem, the transport's handle is available to unprivileged users via the sysfs file system, at /sys/class/iscsi_transport/$TRANSPORT_NAME/handle. When read, the show_transport_handle function (in drivers/scsi/scsi_transport_iscsi.c) is called, which leaks the handle. This handle is actually the pointer to an iscsi_transport struct in the kernel module's global variables.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-develUpgrade kernel-abi-whitelists | May 4, 2022 | Mar 7, 2021 |
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade python-perfUpgrade kernel-livepatch-4.14.214-160.339-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.219-161.340-debuginfoUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.214-160.339Upgrade kernel-develUpgrade kernel-livepatch-4.14.219-164.354Upgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-livepatch-4.14.219-161.340Upgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-4.14.219-164.354-debuginfoUpgrade kernel-livepatch-4.14.225-168.357Upgrade kernel-tools-devel | Mar 22, 2021 | Mar 7, 2021 |
| Amazon_linux | — | Upgrade kernel | Mar 20, 2021 | Mar 7, 2021 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Apr 7, 2021 | Mar 7, 2021 |
| Debian | — | Upgrade linux | Mar 10, 2021 | Mar 7, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debugUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade perfUpgrade python-perf | Sep 16, 2021 | Mar 7, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-headersUpgrade perfUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-develUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libs | Apr 30, 2021 | Mar 7, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-toolsUpgrade kernel-develUpgrade python-perf | May 19, 2021 | Mar 7, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-develUpgrade kernel-sourceUpgrade python-perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftool | May 18, 2021 | Mar 7, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools | Jun 2, 2021 | Mar 7, 2021 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Mar 18, 2021 | Mar 5, 2021 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Apr 7, 2021 | Mar 7, 2021 |
| Suse | — | Upgrade gfs2-kmp-rtUpgrade ocfs2-kmp-preemptUpgrade kernel-preemptUpgrade kgraft-patch-4_4_180-94_116-defaultUpgrade kernel-default-extraUpgrade kselftests-kmp-rt_debugUpgrade kernel-syms-azureUpgrade kselftests-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade kernel-rtUpgrade kernel-rt_debug-extraUpgrade gfs2-kmp-64kbUpgrade kgraft-patch-4_4_180-94_144-defaultUpgrade reiserfs-kmp-rt_debugUpgrade kernel-64kb-develUpgrade dlm-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-ec2-develUpgrade kernel-ppc64-develUpgrade kernel-kvmsmallUpgrade kernel-xen-develUpgrade cluster-md-kmp-azureUpgrade kernel-64kbUpgrade kgraft-patch-4_4_180-94_130-defaultUpgrade kernel-macrosUpgrade kernel-azure-livepatch-develUpgrade kernel-paeUpgrade cluster-md-kmp-rt_debugUpgrade kernel-kvmsmall-develUpgrade kernel-default-base-rebuildUpgrade kgraft-patch-4_4_180-94_121-defaultUpgrade kernel-bigmemUpgrade gfs2-kmp-rt_debugUpgrade kernel-xen-baseUpgrade kernel-debugUpgrade kernel-ec2Upgrade kernel-zfcpdumpUpgrade kernel-azure-extraUpgrade kernel-symsUpgrade kernel-traceUpgrade kernel-64kb-optionalUpgrade kernel-devel-rtUpgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-default-develUpgrade kernel-pae-baseUpgrade kernel-azure-develUpgrade kernel-kvmsmall-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-obs-qaUpgrade kernel-rt_debugUpgrade ocfs2-kmp-rtUpgrade kernel-sourceUpgrade kernel-rt-develUpgrade kernel-default-manUpgrade kernel-xenUpgrade reiserfs-kmp-preemptUpgrade kselftests-kmp-defaultUpgrade kernel-azure-optionalUpgrade kernel-ec2-baseUpgrade dlm-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-ppc64-baseUpgrade kselftests-kmp-preemptUpgrade reiserfs-kmp-defaultUpgrade kernel-preempt-livepatch-develUpgrade kernel-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-develUpgrade kselftests-kmp-rtUpgrade kernel-trace-baseUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kgraft-patch-4_4_180-94_127-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-azure-baseUpgrade kernel-default-optionalUpgrade gfs2-kmp-defaultUpgrade kernel-trace-develUpgrade kernel-docsUpgrade kernel-rt-extraUpgrade dlm-kmp-rt_debugUpgrade kernel-default-baseUpgrade kernel-preempt-extraUpgrade kgraft-patch-4_4_180-94_135-defaultUpgrade kernel-debug-develUpgrade kernel-source-vanillaUpgrade kernel-bigmem-develUpgrade dlm-kmp-preemptUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-preemptUpgrade cluster-md-kmp-64kbUpgrade kernel-ppc64Upgrade ocfs2-kmp-rt_debugUpgrade reiserfs-kmp-64kbUpgrade kernel-vanilla-baseUpgrade kgraft-patch-4_4_180-94_124-defaultUpgrade kernel-azureUpgrade kernel-default-kgraftUpgrade kernel-default-livepatch-develUpgrade kernel-bigmem-baseUpgrade reiserfs-kmp-azureUpgrade kernel-default-livepatchUpgrade dlm-kmp-rtUpgrade kernel-source-rtUpgrade kernel-preempt-develUpgrade reiserfs-kmp-rtUpgrade kgraft-patch-4_4_180-94_138-defaultUpgrade kernel-preempt-optionalUpgrade kernel-rt_debug-develUpgrade kernel-pae-develUpgrade kgraft-patch-4_4_180-94_141-defaultUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-docs-htmlUpgrade gfs2-kmp-preempt | Apr 8, 2021 | Mar 7, 2021 |
| Ubuntu | — | Upgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-206-generic-lpaeUpgrade linux-image-aws-hweUpgrade linux-image-5.4.0-1012-gkeopUpgrade linux-image-powerpc64-smpUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-1032-raspiUpgrade linux-image-kvmUpgrade linux-image-5.3.0-1038-raspi2Upgrade linux-image-5.4.0-1043-azureUpgrade linux-image-5.4.0-1041-oracleUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-206-powerpc64-smpUpgrade linux-image-4.4.0-1124-awsUpgrade linux-image-oemUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-70-genericUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-206-genericUpgrade linux-image-4.15.0-139-generic-lpaeUpgrade linux-image-5.6.0-1052-oemUpgrade linux-image-5.8.0-48-generic-64kUpgrade linux-image-4.15.0-1087-kvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.3.0-72-lowlatencyUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.4.0-206-lowlatencyUpgrade linux-image-4.4.0-1152-snapdragonUpgrade linux-image-generic-lts-xenialUpgrade linux-image-serverUpgrade linux-image-5.8.0-1019-raspiUpgrade linux-image-gke-5.3Upgrade linux-image-4.4.0-1090-kvmUpgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-gke-5.4Upgrade linux-image-5.3.0-1041-gkeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-4.15.0-1110-azureUpgrade linux-image-4.15.0-1098-snapdragonUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-3.13.0-185-genericUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-5.8.0-48-genericUpgrade linux-image-4.4.0-206-powerpc-smpUpgrade linux-image-4.15.0-1096-awsUpgrade linux-image-3.13.0-185-lowlatencyUpgrade linux-image-5.4.0-70-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.8.0-1024-oracleUpgrade linux-image-5.8.0-1019-raspi-nolpaeUpgrade linux-image-5.8.0-1022-kvmUpgrade linux-image-4.4.0-206-powerpc64-embUpgrade linux-image-gkeUpgrade linux-image-5.4.0-1041-awsUpgrade linux-image-aws-lts-18.04Upgrade linux-image-lowlatency-paeUpgrade linux-image-genericUpgrade linux-image-4.15.0-139-genericUpgrade linux-image-powerpc64-embUpgrade linux-image-oem-20.04Upgrade linux-image-raspi2Upgrade linux-image-4.4.0-206-powerpc-e500mcUpgrade linux-image-generic-64kUpgrade linux-image-5.8.0-48-generic-lpaeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oem-20.04bUpgrade linux-image-powerpc-smpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gkeopUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-5.4.0-1040-gcpUpgrade linux-image-3.13.0-185-generic-lpaeUpgrade linux-image-gkeop-5.4Upgrade linux-image-4.15.0-1081-raspi2Upgrade linux-image-4.4.0-1088-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-azure-edgeUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.8.0-1027-awsUpgrade linux-image-4.15.0-1095-gcpUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-generic-paeUpgrade linux-image-4.15.0-1067-oracleUpgrade linux-image-5.10.0-1019-oemUpgrade linux-image-gkeop-5.3Upgrade linux-image-5.4.0-70-generic-lpaeUpgrade linux-image-5.4.0-1039-gkeUpgrade linux-image-5.8.0-48-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.8.0-1026-gcpUpgrade linux-image-raspiUpgrade linux-image-4.15.0-139-lowlatencyUpgrade linux-image-4.4.0-1148-raspi2Upgrade linux-image-5.3.0-72-genericUpgrade linux-image-gcpUpgrade linux-image-virtualUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-oem-osp1Upgrade linux-image-5.8.0-1026-azureUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.4.0-1036-kvm | Mar 20, 2021 | Mar 7, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 7, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub