An issue was discovered in the Linux kernel through 5.11.3. A kernel pointer leak can be used to determine the address of the iscsi_transport structure. When an iSCSI transport is registered with the iSCSI subsystem, the transport's handle is available to unprivileged users via the sysfs file system, at /sys/class/iscsi_transport/$TRANSPORT_NAME/handle. When read, the show_transport_handle function (in drivers/scsi/scsi_transport_iscsi.c) is called, which leaks the handle. This handle is actually the pointer to an iscsi_transport struct in the kernel module's global variables.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-develUpgrade kernel-abi-whitelists | May 4, 2022 | Mar 7, 2021 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-4.14.219-161.340Upgrade perfUpgrade kernel-develUpgrade kernel-livepatch-4.14.219-164.354Upgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-4.14.219-164.354-debuginfoUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-4.14.225-168.357Upgrade kernel-headersUpgrade python-perfUpgrade kernel-livepatch-4.14.214-160.339Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.219-161.340-debuginfoUpgrade kernel-livepatch-4.14.214-160.339-debuginfoUpgrade bpftool-debuginfoUpgrade python-perf-debuginfo | Mar 22, 2021 | Mar 7, 2021 |
| Amazon_linux | — | Upgrade kernel | Mar 20, 2021 | Mar 7, 2021 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Apr 7, 2021 | Mar 7, 2021 |
| Debian | — | Upgrade linux | Mar 10, 2021 | Mar 7, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-debugUpgrade perfUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-tools | Sep 16, 2021 | Mar 7, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade perfUpgrade python-perfUpgrade kernel-headers | Apr 30, 2021 | Mar 7, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade perfUpgrade python-perfUpgrade kernel-devel | May 19, 2021 | Mar 7, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade python3-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel-sourceUpgrade bpftoolUpgrade kernelUpgrade kernel-headersUpgrade python-perfUpgrade kernel-tools-libs | May 18, 2021 | Mar 7, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Jun 2, 2021 | Mar 7, 2021 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Mar 18, 2021 | Mar 5, 2021 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Apr 7, 2021 | Mar 7, 2021 |
| Suse | — | Upgrade kernel-macrosUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debugUpgrade gfs2-kmp-rt_debugUpgrade cluster-md-kmp-rt_debugUpgrade kernel-zfcpdumpUpgrade kernel-azure-extraUpgrade kernel-64kbUpgrade kernel-ppc64-develUpgrade kernel-azure-livepatch-develUpgrade kernel-bigmemUpgrade kernel-syms-azureUpgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade kernel-syms-rtUpgrade kernel-paeUpgrade kernel-symsUpgrade kernel-sourceUpgrade reiserfs-kmp-preemptUpgrade kernel-default-develUpgrade kgraft-patch-4_4_180-94_144-defaultUpgrade kgraft-patch-4_4_180-94_116-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-rtUpgrade kernel-azure-develUpgrade gfs2-kmp-rtUpgrade dlm-kmp-64kbUpgrade kernel-default-manUpgrade kernel-default-extraUpgrade kgraft-patch-4_4_180-94_130-defaultUpgrade kselftests-kmp-rt_debugUpgrade dlm-kmp-azureUpgrade kernel-rt_debug-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-xenUpgrade ocfs2-kmp-preemptUpgrade kernel-rt-develUpgrade kernel-ec2-develUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-optionalUpgrade kernel-traceUpgrade kernel-ec2Upgrade kernel-pae-baseUpgrade kernel-64kb-develUpgrade kselftests-kmp-64kbUpgrade kgraft-patch-4_4_180-94_121-defaultUpgrade kernel-xen-develUpgrade cluster-md-kmp-defaultUpgrade kernel-debugUpgrade kernel-obs-qaUpgrade kernel-devel-rtUpgrade cluster-md-kmp-azureUpgrade kernel-xen-baseUpgrade kernel-kvmsmallUpgrade kernel-preemptUpgrade reiserfs-kmp-rt_debugUpgrade kernel-debug-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-rtUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-baseUpgrade kselftests-kmp-azureUpgrade kgraft-patch-4_4_180-94_127-defaultUpgrade kernel-pae-develUpgrade kernel-docs-htmlUpgrade kernel-preempt-optionalUpgrade kernel-rt_debug-develUpgrade kgraft-patch-4_4_180-94_138-defaultUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-preempt-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-azureUpgrade dlm-kmp-rtUpgrade kernel-preempt-develUpgrade kernel-docsUpgrade kernel-trace-develUpgrade kernel-rt-extraUpgrade dlm-kmp-rt_debugUpgrade kernel-preempt-extraUpgrade dlm-kmp-preemptUpgrade kernel-source-rtUpgrade kernel-default-optionalUpgrade kernel-azure-optionalUpgrade gfs2-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-debug-develUpgrade kernel-bigmem-develUpgrade cluster-md-kmp-preemptUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-extraUpgrade kernel-ppc64Upgrade ocfs2-kmp-rt_debugUpgrade kgraft-patch-4_4_180-94_135-defaultUpgrade kernel-bigmem-baseUpgrade kernel-source-vanillaUpgrade kernel-default-kgraftUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-preemptUpgrade ocfs2-kmp-64kbUpgrade kgraft-patch-4_4_180-94_141-defaultUpgrade kernel-ppc64-baseUpgrade kernel-trace-baseUpgrade kernel-develUpgrade reiserfs-kmp-64kbUpgrade kgraft-patch-4_4_180-94_124-defaultUpgrade kernel-defaultUpgrade kernel-vanilla-baseUpgrade kernel-obs-buildUpgrade kernel-ec2-baseUpgrade gfs2-kmp-preemptUpgrade kernel-default-livepatch-devel | Apr 8, 2021 | Mar 7, 2021 |
| Ubuntu | — | Upgrade linux-image-5.4.0-70-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-5.8.0-1026-azureUpgrade linux-image-oem-osp1Upgrade linux-image-gkeop-5.3Upgrade linux-image-powerpc-smpUpgrade linux-image-oem-20.04Upgrade linux-image-raspi2Upgrade linux-image-4.15.0-139-lowlatencyUpgrade linux-image-4.4.0-1088-awsUpgrade linux-image-3.13.0-185-generic-lpaeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.8.0-48-lowlatencyUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-1039-gkeUpgrade linux-image-5.10.0-1019-oemUpgrade linux-image-gkeopUpgrade linux-image-virtualUpgrade linux-image-4.15.0-1067-oracleUpgrade linux-image-4.15.0-1081-raspi2Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.4.0-206-powerpc-e500mcUpgrade linux-image-5.3.0-72-genericUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1041-awsUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.8.0-48-generic-lpaeUpgrade linux-image-5.4.0-1036-kvmUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-powerpc64-embUpgrade linux-image-lowlatency-paeUpgrade linux-image-4.15.0-139-genericUpgrade linux-image-5.8.0-1027-awsUpgrade linux-image-gkeop-5.4Upgrade linux-image-generic-paeUpgrade linux-image-azure-lts-18.04Upgrade linux-image-azure-edgeUpgrade linux-image-azureUpgrade linux-image-genericUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1095-gcpUpgrade linux-image-5.4.0-1040-gcpUpgrade linux-image-oem-20.04bUpgrade linux-image-4.4.0-1148-raspi2Upgrade linux-image-5.8.0-1026-gcpUpgrade linux-image-5.4.0-70-genericUpgrade linux-image-oracleUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-4.4.0-206-lowlatencyUpgrade linux-image-aws-hweUpgrade linux-image-5.3.0-1038-raspi2Upgrade linux-image-4.4.0-1090-kvmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-1087-kvmUpgrade linux-image-5.8.0-48-generic-64kUpgrade linux-image-5.6.0-1052-oemUpgrade linux-image-4.4.0-206-powerpc64-embUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-5.8.0-1019-raspi-nolpaeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-3.13.0-185-genericUpgrade linux-image-4.4.0-206-generic-lpaeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-3.13.0-185-lowlatencyUpgrade linux-image-5.8.0-1024-oracleUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.8.0-48-genericUpgrade linux-image-4.4.0-1124-awsUpgrade linux-image-generic-lts-trustyUpgrade linux-image-generic-lpaeUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1096-awsUpgrade linux-image-powerpc64-smpUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-oemUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-4.15.0-139-generic-lpaeUpgrade linux-image-4.4.0-206-powerpc64-smpUpgrade linux-image-5.4.0-1041-oracleUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.8.0-1022-kvmUpgrade linux-image-5.4.0-1032-raspiUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-5.3.0-72-lowlatencyUpgrade linux-image-5.4.0-1012-gkeopUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-gke-5.4Upgrade linux-image-awsUpgrade linux-image-5.4.0-70-lowlatencyUpgrade linux-image-4.4.0-1152-snapdragonUpgrade linux-image-4.15.0-1110-azureUpgrade linux-image-4.15.0-1098-snapdragonUpgrade linux-image-gke-5.3Upgrade linux-image-4.4.0-206-genericUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-206-powerpc-smpUpgrade linux-image-kvmUpgrade linux-image-serverUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.8.0-1019-raspiUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1043-azureUpgrade linux-image-5.3.0-1041-gke | Mar 20, 2021 | Mar 7, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 7, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub