An issue was discovered in the Linux kernel through 5.11.3. A kernel pointer leak can be used to determine the address of the iscsi_transport structure. When an iSCSI transport is registered with the iSCSI subsystem, the transport's handle is available to unprivileged users via the sysfs file system, at /sys/class/iscsi_transport/$TRANSPORT_NAME/handle. When read, the show_transport_handle function (in drivers/scsi/scsi_transport_iscsi.c) is called, which leaks the handle. This handle is actually the pointer to an iscsi_transport struct in the kernel module's global variables.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-abi-whitelistsUpgrade kernel-tools-libs-devel | May 4, 2022 | Mar 7, 2021 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.225-168.357Upgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-livepatch-4.14.219-164.354-debuginfoUpgrade kernel-livepatch-4.14.219-164.354Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-livepatch-4.14.219-161.340Upgrade kernel-livepatch-4.14.219-161.340-debuginfoUpgrade kernelUpgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-4.14.214-160.339Upgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-livepatch-4.14.214-160.339-debuginfo | Mar 22, 2021 | Mar 7, 2021 |
| Amazon_linux | — | Upgrade kernel | Mar 20, 2021 | Mar 7, 2021 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Apr 7, 2021 | Mar 7, 2021 |
| Debian | — | Upgrade linux | Mar 10, 2021 | Mar 7, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-develUpgrade kernelUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade python-perfUpgrade perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Sep 16, 2021 | Mar 7, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-headersUpgrade perf | Apr 30, 2021 | Mar 7, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-headersUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-devel | May 19, 2021 | Mar 7, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-sourceUpgrade kernel-develUpgrade kernel-toolsUpgrade perfUpgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-headers | May 18, 2021 | Mar 7, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Jun 2, 2021 | Mar 7, 2021 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Mar 18, 2021 | Mar 5, 2021 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Apr 7, 2021 | Mar 7, 2021 |
| Suse | — | Upgrade gfs2-kmp-azureUpgrade kernel-docs-htmlUpgrade kgraft-patch-4_4_180-94_141-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-preempt-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-preempt-develUpgrade kernel-default-kgraftUpgrade reiserfs-kmp-64kbUpgrade kgraft-patch-4_4_180-94_138-defaultUpgrade kselftests-kmp-preemptUpgrade kernel-preempt-optionalUpgrade kernel-vanilla-baseUpgrade kernel-rt_debug-develUpgrade kernel-rt-extraUpgrade kernel-trace-develUpgrade kernel-default-optionalUpgrade kernel-ec2-baseUpgrade gfs2-kmp-defaultUpgrade kernel-docsUpgrade dlm-kmp-rt_debugUpgrade kernel-bigmem-baseUpgrade kernel-source-rtUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-64kbUpgrade kernel-bigmem-develUpgrade gfs2-kmp-preemptUpgrade ocfs2-kmp-rt_debugUpgrade kernel-64kb-extraUpgrade kgraft-patch-4_4_180-94_135-defaultUpgrade kernel-ppc64Upgrade reiserfs-kmp-rtUpgrade kernel-preempt-extraUpgrade kernel-source-vanillaUpgrade kernel-debug-develUpgrade kernel-default-livepatch-develUpgrade kgraft-patch-4_4_180-94_124-defaultUpgrade kernel-pae-develUpgrade kernel-obs-buildUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-azure-baseUpgrade kgraft-patch-4_4_180-94_127-defaultUpgrade kernel-trace-baseUpgrade ocfs2-kmp-defaultUpgrade kernel-develUpgrade kernel-defaultUpgrade kernel-ppc64-baseUpgrade ocfs2-kmp-azureUpgrade kernel-default-livepatchUpgrade dlm-kmp-rtUpgrade kernel-azureUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-preemptUpgrade dlm-kmp-preemptUpgrade gfs2-kmp-rt_debugUpgrade kernel-pae-baseUpgrade kernel-azure-livepatch-develUpgrade kernel-xen-baseUpgrade kernel-bigmemUpgrade kernel-obs-qaUpgrade ocfs2-kmp-rtUpgrade kernel-traceUpgrade kernel-devel-rtUpgrade kernel-rt_debug-extraUpgrade kernel-azure-develUpgrade kernel-default-extraUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-rt_debugUpgrade kernel-rtUpgrade kernel-preemptUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-debug-livepatch-develUpgrade ocfs2-kmp-preemptUpgrade dlm-kmp-azureUpgrade kernel-xenUpgrade kernel-rt-develUpgrade dlm-kmp-64kbUpgrade kernel-ec2-develUpgrade kernel-kvmsmallUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-64kbUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-rt_debugUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-livepatch-develUpgrade kernel-syms-azureUpgrade kselftests-kmp-defaultUpgrade kernel-paeUpgrade reiserfs-kmp-preemptUpgrade kgraft-patch-4_4_180-94_130-defaultUpgrade kgraft-patch-4_4_180-94_121-defaultUpgrade kernel-symsUpgrade kgraft-patch-4_4_180-94_144-defaultUpgrade kernel-sourceUpgrade kernel-rt_debugUpgrade kernel-devel-azureUpgrade kernel-syms-rtUpgrade kernel-source-azureUpgrade cluster-md-kmp-defaultUpgrade kgraft-patch-4_4_180-94_116-defaultUpgrade kernel-default-develUpgrade kernel-64kb-optionalUpgrade kernel-ec2Upgrade kernel-default-manUpgrade kernel-ppc64-develUpgrade kernel-xen-develUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-rt_debugUpgrade kernel-azure-extraUpgrade kernel-debugUpgrade kernel-macros | Apr 8, 2021 | Mar 7, 2021 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.4.0-1036-kvmUpgrade linux-image-5.8.0-1026-gcpUpgrade linux-image-5.4.0-70-generic-lpaeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-generic-paeUpgrade linux-image-gkeopUpgrade linux-image-oem-20.04bUpgrade linux-image-gcpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-3.13.0-185-generic-lpaeUpgrade linux-image-4.4.0-206-powerpc-e500mcUpgrade linux-image-4.15.0-139-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-4.4.0-1148-raspi2Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1041-awsUpgrade linux-image-oem-20.04Upgrade linux-image-4.15.0-1081-raspi2Upgrade linux-image-5.4.0-1040-gcpUpgrade linux-image-genericUpgrade linux-image-azure-edgeUpgrade linux-image-gkeop-5.3Upgrade linux-image-4.4.0-1088-awsUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-5.8.0-1027-awsUpgrade linux-image-4.15.0-1095-gcpUpgrade linux-image-5.8.0-48-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1039-gkeUpgrade linux-image-raspiUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.3.0-72-genericUpgrade linux-image-5.10.0-1019-oemUpgrade linux-image-5.8.0-48-lowlatencyUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-paeUpgrade linux-image-powerpc64-embUpgrade linux-image-5.8.0-1026-azureUpgrade linux-image-virtualUpgrade linux-image-4.15.0-1067-oracleUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-139-genericUpgrade linux-image-powerpc-smpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1096-awsUpgrade linux-image-4.4.0-206-generic-lpaeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-4.15.0-1110-azureUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.3.0-1041-gkeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-lts-trustyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oracleUpgrade linux-image-4.4.0-1124-awsUpgrade linux-image-5.4.0-1041-oracleUpgrade linux-image-5.8.0-1019-raspiUpgrade linux-image-5.4.0-70-lowlatencyUpgrade linux-image-5.8.0-1024-oracleUpgrade linux-image-aws-hweUpgrade linux-image-5.3.0-1038-raspi2Upgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-1090-kvmUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-206-lowlatencyUpgrade linux-image-serverUpgrade linux-image-3.13.0-185-genericUpgrade linux-image-5.4.0-1043-azureUpgrade linux-image-oemUpgrade linux-image-4.4.0-206-powerpc64-embUpgrade linux-image-gke-5.4Upgrade linux-image-gke-5.3Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-powerpc64-smpUpgrade linux-image-5.3.0-72-lowlatencyUpgrade linux-image-5.8.0-1022-kvmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1012-gkeopUpgrade linux-image-4.4.0-206-powerpc64-smpUpgrade linux-image-generic-lpaeUpgrade linux-image-5.8.0-1019-raspi-nolpaeUpgrade linux-image-4.4.0-206-powerpc-smpUpgrade linux-image-kvmUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.8.0-48-genericUpgrade linux-image-4.15.0-1098-snapdragonUpgrade linux-image-3.13.0-185-lowlatencyUpgrade linux-image-4.15.0-139-generic-lpaeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-1087-kvmUpgrade linux-image-5.6.0-1052-oemUpgrade linux-image-5.8.0-48-generic-64kUpgrade linux-image-4.4.0-206-genericUpgrade linux-image-5.4.0-70-genericUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.4.0-1152-snapdragonUpgrade linux-image-awsUpgrade linux-image-5.4.0-1032-raspi | Mar 20, 2021 | Mar 7, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 7, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub