An issue was discovered in the Linux kernel before 5.11.9. drivers/vhost/vdpa.c has a use-after-free because v->config_ctx has an invalid value upon re-opening a character device, aka CID-f6bbf0010ba0.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 26, 2021 |
| Oracle_linux | — | Upgrade kernel-uek | May 10, 2021 | Mar 14, 2021 |
| Ubuntu | — | Upgrade linux-image-5.8.0-1024-raspi-nolpaeUpgrade linux-image-5.8.0-53-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-5.10.0-1026-oemUpgrade linux-image-awsUpgrade linux-image-5.8.0-1029-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.8.0-1024-raspiUpgrade linux-image-oracleUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-5.8.0-1031-gcpUpgrade linux-image-5.8.0-1032-azureUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-generic-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-5.8.0-53-lowlatencyUpgrade linux-image-genericUpgrade linux-image-azureUpgrade linux-image-5.8.0-1027-kvmUpgrade linux-image-5.8.0-53-generic-64kUpgrade linux-image-5.8.0-53-genericUpgrade linux-image-5.8.0-1033-awsUpgrade linux-image-gkeUpgrade linux-image-raspi | May 12, 2021 | Mar 26, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub