fs/nfsd/nfs3xdr.c in the Linux kernel through 5.10.8, when there is an NFS export of a subdirectory of a filesystem, allows remote attackers to traverse to other parts of the filesystem via READDIRPLUS. NOTE: some parties argue that such a subdirectory export is not intended to prevent this attack; see also the exports(5) no_subtree_check default behavior
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-livepatch-4.14.219-161.340Upgrade python-perfUpgrade kernel-develUpgrade perf-debuginfoUpgrade perf | Feb 22, 2021 | Jan 19, 2021 |
| Amazon_linux | — | Upgrade kernel | Feb 18, 2021 | Jan 19, 2021 |
| Debian | — | Upgrade linux | Mar 9, 2021 | Jan 19, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debugUpgrade kernel-develUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-debug-develUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-headers | Sep 16, 2021 | Jan 19, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-develUpgrade kernelUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools | Apr 30, 2021 | Jan 19, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-develUpgrade kernel | May 19, 2021 | Jan 19, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headersUpgrade perfUpgrade kernel-sourceUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-devel | May 18, 2021 | Jan 19, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | Feb 8, 2021 | Jan 19, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 19, 2021 |
| Ubuntu | — | Upgrade linux-image-5.8.0-1020-raspi-nolpaeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.4.0-1011-gkeopUpgrade linux-image-5.8.0-1027-gcpUpgrade linux-image-5.4.0-1034-kvmUpgrade linux-image-awsUpgrade linux-image-4.4.0-1089-kvmUpgrade linux-image-5.4.0-1037-gkeUpgrade linux-image-5.8.0-49-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1038-gcpUpgrade linux-image-generic-64kUpgrade linux-image-4.4.0-204-powerpc64-embUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-4.15.0-1109-azureUpgrade linux-image-4.4.0-204-lowlatencyUpgrade linux-image-5.4.0-1039-awsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-aws-hweUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-67-genericUpgrade linux-image-4.15.0-1094-gcpUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-5.8.0-1020-raspiUpgrade linux-image-4.15.0-1013-dell300xUpgrade linux-image-4.4.0-204-generic-lpaeUpgrade linux-image-aws-edgeUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1080-raspi2Upgrade linux-image-4.4.0-204-powerpc-e500mcUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.8.0-49-genericUpgrade linux-image-4.4.0-1087-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-4.15.0-137-lowlatencyUpgrade linux-image-gkeop-5.4Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-5.8.0-1027-azureUpgrade linux-image-4.4.0-1123-awsUpgrade linux-image-5.4.0-1039-oracleUpgrade linux-image-4.15.0-1097-snapdragonUpgrade linux-image-4.15.0-1086-kvmUpgrade linux-image-powerpc-e500mcUpgrade linux-image-snapdragonUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.15.0-137-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-generic-lts-xenialUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1041-azureUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-67-lowlatencyUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-genericUpgrade linux-image-oem-osp1Upgrade linux-image-4.4.0-204-powerpc64-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-oemUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-powerpc-smpUpgrade linux-image-powerpc64-smpUpgrade linux-image-azure-edgeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gcp-edgeUpgrade linux-image-raspi2Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1030-raspiUpgrade linux-image-4.15.0-1095-awsUpgrade linux-image-gkeUpgrade linux-image-virtualUpgrade linux-image-5.8.0-1025-oracleUpgrade linux-image-5.8.0-49-generic-64kUpgrade linux-image-5.8.0-1023-kvmUpgrade linux-image-4.4.0-204-powerpc-smpUpgrade linux-image-oem-20.04Upgrade linux-image-5.6.0-1053-oemUpgrade linux-image-5.4.0-67-generic-lpaeUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.4.0-1147-raspi2Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-dell300xUpgrade linux-image-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-204-genericUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1066-oracleUpgrade linux-image-4.4.0-1151-snapdragonUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-4.15.0-137-genericUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.8.0-49-generic-lpaeUpgrade linux-image-gke-5.4Upgrade linux-image-5.8.0-1028-awsUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-gcp | Mar 17, 2021 | Jan 19, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 19, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub