An issue was discovered in the Linux kernel through 5.11.3. Certain iSCSI data structures do not have appropriate length constraints or checks, and can exceed the PAGE_SIZE value. An unprivileged user can send a Netlink message that is associated with iSCSI, and has a length up to the maximum length of a Netlink message.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-abi-whitelistsUpgrade kernel-tools-libs-devel | May 4, 2022 | Mar 7, 2021 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.219-164.354-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-4.14.225-168.357Upgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-4.14.219-161.340Upgrade kernelUpgrade kernel-develUpgrade kernel-livepatch-4.14.219-164.354Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-livepatch-4.14.219-161.340-debuginfoUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-livepatch-4.14.214-160.339Upgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.214-160.339-debuginfo | Mar 22, 2021 | Mar 7, 2021 |
| Amazon_linux | — | Upgrade kernel | Mar 20, 2021 | Mar 7, 2021 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1160Upgrade kernelUpgrade kpatch-patch-3_10_0-1160_15_2Upgrade kpatch-patch-3_10_0-1160_2_2-debuginfoUpgrade kpatch-patch-3_10_0-1160_6_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_2_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_2_2Upgrade kpatch-patch-3_10_0-1160_2_1Upgrade kpatch-patch-3_10_0-1160_11_1-debuginfoUpgrade kpatch-patch-3_10_0-1160-debuginfoUpgrade kpatch-patch-3_10_0-1160_6_1Upgrade kpatch-patch-3_10_0-1160_21_1-debuginfoUpgrade kernel-rtUpgrade kpatch-patch-3_10_0-1160_11_1Upgrade kpatch-patch-3_10_0-1160_15_2-debuginfoUpgrade kpatch-patch-3_10_0-1160_21_1 | Apr 7, 2021 | Mar 7, 2021 |
| Debian | — | Upgrade linux | Mar 10, 2021 | Mar 7, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade perfUpgrade python-perf | Sep 16, 2021 | Mar 7, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernelUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade perfUpgrade kernel-headers | Apr 30, 2021 | Mar 7, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libs | May 19, 2021 | Mar 7, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-sourceUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-headersUpgrade perfUpgrade bpftoolUpgrade kernelUpgrade kernel-develUpgrade python3-perf | May 18, 2021 | Mar 7, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Jun 2, 2021 | Mar 7, 2021 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Mar 18, 2021 | Mar 5, 2021 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Apr 7, 2021 | Mar 7, 2021 |
| Suse | — | Upgrade kernel-preemptUpgrade kernel-debug-develUpgrade kernel-devel-rtUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kbUpgrade kgraft-patch-4_4_180-94_130-defaultUpgrade kernel-syms-azureUpgrade gfs2-kmp-64kbUpgrade kernel-devel-azureUpgrade kernel-trace-develUpgrade kernel-xen-develUpgrade kgraft-patch-4_4_180-94_138-defaultUpgrade kernel-ppc64-baseUpgrade kernel-docsUpgrade kernel-default-kgraftUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debugUpgrade kernel-pae-baseUpgrade kernel-syms-rtUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kgraft-patch-4_4_180-94_144-defaultUpgrade kernel-ec2-baseUpgrade kernel-sourceUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-develUpgrade kernel-rtUpgrade kernel-ec2-develUpgrade kernel-kvmsmall-develUpgrade kernel-default-manUpgrade kselftests-kmp-rt_debugUpgrade kernel-64kb-optionalUpgrade kernel-symsUpgrade kernel-pae-develUpgrade cluster-md-kmp-preemptUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-rt_debugUpgrade kgraft-patch-4_4_180-94_127-defaultUpgrade kernel-ppc64Upgrade dlm-kmp-azureUpgrade kernel-source-azureUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-azureUpgrade kernel-obs-qaUpgrade kernel-xenUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-develUpgrade cluster-md-kmp-rt_debugUpgrade kernel-azure-develUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-defaultUpgrade kernel-default-develUpgrade ocfs2-kmp-preemptUpgrade gfs2-kmp-rt_debugUpgrade kernel-xen-baseUpgrade kernel-traceUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debugUpgrade kernel-rt_debug-extraUpgrade kselftests-kmp-64kbUpgrade kernel-rt-extraUpgrade kernel-develUpgrade kernel-bigmem-develUpgrade kselftests-kmp-azureUpgrade dlm-kmp-rt_debugUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-64kbUpgrade kgraft-patch-4_4_180-94_135-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-preempt-extraUpgrade kgraft-patch-4_4_180-94_124-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-vanilla-baseUpgrade gfs2-kmp-preemptUpgrade reiserfs-kmp-preemptUpgrade kernel-docs-htmlUpgrade kernel-azure-optionalUpgrade kernel-azure-extraUpgrade kernel-preempt-develUpgrade kgraft-patch-4_4_180-94_141-defaultUpgrade kernel-obs-buildUpgrade kernel-source-vanillaUpgrade kernel-trace-baseUpgrade kernel-default-optionalUpgrade ocfs2-kmp-rt_debugUpgrade kernel-ppc64-develUpgrade kgraft-patch-4_4_180-94_116-defaultUpgrade kernel-preempt-optionalUpgrade kernel-ec2Upgrade kernel-bigmem-baseUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-preemptUpgrade ocfs2-kmp-azureUpgrade kernel-paeUpgrade dlm-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-preempt-livepatch-develUpgrade kernel-bigmemUpgrade kernel-default-livepatchUpgrade kernel-azureUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-extraUpgrade dlm-kmp-preemptUpgrade gfs2-kmp-azureUpgrade kernel-defaultUpgrade kernel-azure-baseUpgrade kernel-source-rtUpgrade kernel-default-baseUpgrade kselftests-kmp-rtUpgrade kgraft-patch-4_4_180-94_121-defaultUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-default | Apr 8, 2021 | Mar 7, 2021 |
| Ubuntu | — | Upgrade linux-image-4.4.0-206-powerpc64-embUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.4.0-1090-kvmUpgrade linux-image-raspi2Upgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-paeUpgrade linux-image-4.4.0-1152-snapdragonUpgrade linux-image-genericUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-gkeopUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1067-oracleUpgrade linux-image-generic-64kUpgrade linux-image-4.15.0-139-lowlatencyUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-kvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.8.0-48-generic-lpaeUpgrade linux-image-5.6.0-1052-oemUpgrade linux-image-4.4.0-1088-awsUpgrade linux-image-gke-5.4Upgrade linux-image-oemUpgrade linux-image-4.15.0-139-genericUpgrade linux-image-4.15.0-1110-azureUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-powerpc-smpUpgrade linux-image-serverUpgrade linux-image-azure-lts-18.04Upgrade linux-image-gkeUpgrade linux-image-4.15.0-1098-snapdragonUpgrade linux-image-4.15.0-1087-kvmUpgrade linux-image-5.8.0-1026-gcpUpgrade linux-image-powerpc64-embUpgrade linux-image-awsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1041-awsUpgrade linux-image-5.8.0-48-genericUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gkeop-5.3Upgrade linux-image-5.4.0-1043-azureUpgrade linux-image-5.4.0-1040-gcpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.10.0-1019-oemUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.8.0-1024-oracleUpgrade linux-image-generic-lts-trustyUpgrade linux-image-snapdragonUpgrade linux-image-5.4.0-1032-raspiUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.8.0-1019-raspiUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-1081-raspi2Upgrade linux-image-gkeop-5.4Upgrade linux-image-4.4.0-206-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1041-oracleUpgrade linux-image-5.3.0-72-genericUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1036-kvmUpgrade linux-image-5.4.0-70-genericUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-4.4.0-206-powerpc64-smpUpgrade linux-image-5.3.0-1038-raspi2Upgrade linux-image-5.8.0-1026-azureUpgrade linux-image-5.8.0-1019-raspi-nolpaeUpgrade linux-image-5.8.0-1022-kvmUpgrade linux-image-4.4.0-206-powerpc-e500mcUpgrade linux-image-gcpUpgrade linux-image-powerpc-e500mcUpgrade linux-image-5.4.0-70-generic-lpaeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.3.0-72-lowlatencyUpgrade linux-image-4.4.0-206-powerpc-smpUpgrade linux-image-azure-edgeUpgrade linux-image-4.15.0-1096-awsUpgrade linux-image-4.15.0-139-generic-lpaeUpgrade linux-image-4.4.0-206-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-5.8.0-48-lowlatencyUpgrade linux-image-4.4.0-1124-awsUpgrade linux-image-lowlatency-paeUpgrade linux-image-oem-20.04bUpgrade linux-image-5.3.0-1041-gkeUpgrade linux-image-3.13.0-185-generic-lpaeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-aws-hwe | Mar 20, 2021 | Mar 7, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 7, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub