fs/nfsd/nfs3xdr.c in the Linux kernel through 5.10.8, when there is an NFS export of a subdirectory of a filesystem, allows remote attackers to traverse to other parts of the filesystem via READDIRPLUS. NOTE: some parties argue that such a subdirectory export is not intended to prevent this attack; see also the exports(5) no_subtree_check default behavior
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade python-perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-4.14.219-161.340Upgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade perf | Feb 22, 2021 | Jan 19, 2021 |
| Amazon_linux | — | Upgrade kernel | Feb 18, 2021 | Jan 19, 2021 |
| Debian | — | Upgrade linux | Mar 9, 2021 | Jan 19, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-debug-develUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debug | Sep 16, 2021 | Jan 19, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernelUpgrade perfUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-tools | Apr 30, 2021 | Jan 19, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernelUpgrade kernel-devel | May 19, 2021 | Jan 19, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade bpftoolUpgrade python-perfUpgrade kernel-develUpgrade kernel-sourceUpgrade perfUpgrade kernel-toolsUpgrade python3-perf | May 18, 2021 | Jan 19, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | Feb 8, 2021 | Jan 19, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 19, 2021 |
| Ubuntu | — | Upgrade linux-image-oem-osp1Upgrade linux-image-gcp-edgeUpgrade linux-image-4.15.0-1095-awsUpgrade linux-image-5.8.0-49-generic-64kUpgrade linux-image-powerpc64-smpUpgrade linux-image-5.8.0-1025-oracleUpgrade linux-image-azure-edgeUpgrade linux-image-virtualUpgrade linux-image-5.4.0-1041-azureUpgrade linux-image-gkeUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-204-genericUpgrade linux-image-aws-lts-18.04Upgrade linux-image-dell300xUpgrade linux-image-oracleUpgrade linux-image-5.4.0-1030-raspiUpgrade linux-image-gkeopUpgrade linux-image-4.4.0-1147-raspi2Upgrade linux-image-5.8.0-49-generic-lpaeUpgrade linux-image-4.15.0-137-genericUpgrade linux-image-powerpc-smpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-1066-oracleUpgrade linux-image-oem-20.04Upgrade linux-image-5.8.0-1023-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-oemUpgrade linux-image-5.6.0-1053-oemUpgrade linux-image-5.4.0-67-lowlatencyUpgrade linux-image-azure-lts-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.4.0-1151-snapdragonUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-powerpc64-embUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.8.0-1028-awsUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-genericUpgrade linux-image-4.4.0-204-powerpc-smpUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-4.4.0-204-powerpc64-smpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-gke-5.4Upgrade linux-image-5.4.0-67-generic-lpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-raspiUpgrade linux-image-4.4.0-204-powerpc-e500mcUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-5.4.0-1011-gkeopUpgrade linux-image-4.15.0-1013-dell300xUpgrade linux-image-4.15.0-1109-azureUpgrade linux-image-5.8.0-1020-raspi-nolpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-4.4.0-1089-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-137-lowlatencyUpgrade linux-image-5.8.0-1027-azureUpgrade linux-image-4.4.0-204-generic-lpaeUpgrade linux-image-4.4.0-1123-awsUpgrade linux-image-kvmUpgrade linux-image-gkeop-5.4Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.8.0-49-genericUpgrade linux-image-5.4.0-1039-oracleUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.8.0-49-lowlatencyUpgrade linux-image-5.8.0-1027-gcpUpgrade linux-image-5.4.0-1038-gcpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1097-snapdragonUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.15.0-137-generic-lpaeUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1086-kvmUpgrade linux-image-azureUpgrade linux-image-4.4.0-204-lowlatencyUpgrade linux-image-4.4.0-204-powerpc64-embUpgrade linux-image-5.4.0-1039-awsUpgrade linux-image-5.4.0-1037-gkeUpgrade linux-image-4.15.0-1094-gcpUpgrade linux-image-4.15.0-1080-raspi2Upgrade linux-image-aws-edgeUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-5.4.0-67-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-4.4.0-1087-awsUpgrade linux-image-5.4.0-1034-kvmUpgrade linux-image-awsUpgrade linux-image-aws-hweUpgrade linux-image-5.8.0-1020-raspiUpgrade linux-image-lowlatency | Mar 17, 2021 | Jan 19, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 19, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub