fs/nfsd/nfs3xdr.c in the Linux kernel through 5.10.8, when there is an NFS export of a subdirectory of a filesystem, allows remote attackers to traverse to other parts of the filesystem via READDIRPLUS. NOTE: some parties argue that such a subdirectory export is not intended to prevent this attack; see also the exports(5) no_subtree_check default behavior
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-4.14.219-161.340Upgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-develUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade perf | Feb 22, 2021 | Jan 19, 2021 |
| Amazon_linux | — | Upgrade kernel | Feb 18, 2021 | Jan 19, 2021 |
| Debian | — | Upgrade linux | Mar 9, 2021 | Jan 19, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debug-develUpgrade kernel-debugUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernelUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf | Sep 16, 2021 | Jan 19, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernelUpgrade perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64 | Apr 30, 2021 | Jan 19, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade kernel-develUpgrade kernelUpgrade python-perfUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-tools | May 19, 2021 | Jan 19, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-develUpgrade perfUpgrade kernel-sourceUpgrade python3-perfUpgrade kernel-tools | May 18, 2021 | Jan 19, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | Feb 8, 2021 | Jan 19, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 19, 2021 |
| Ubuntu | — | Upgrade linux-image-5.4.0-67-generic-lpaeUpgrade linux-image-aws-lts-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-gcpUpgrade linux-image-5.8.0-1028-awsUpgrade linux-image-4.4.0-1151-snapdragonUpgrade linux-image-genericUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gke-5.4Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-oracleUpgrade linux-image-azure-edgeUpgrade linux-image-powerpc-smpUpgrade linux-image-oem-osp1Upgrade linux-image-4.15.0-137-genericUpgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-gkeUpgrade linux-image-5.8.0-49-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-5.8.0-1025-oracleUpgrade linux-image-5.8.0-1023-kvmUpgrade linux-image-gcp-edgeUpgrade linux-image-4.4.0-1147-raspi2Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.15.0-1095-awsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.4.0-204-genericUpgrade linux-image-oem-20.04Upgrade linux-image-4.4.0-204-powerpc64-smpUpgrade linux-image-5.4.0-1041-azureUpgrade linux-image-5.8.0-49-generic-64kUpgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-dell300xUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gkeopUpgrade linux-image-5.4.0-1030-raspiUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-67-lowlatencyUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-1066-oracleUpgrade linux-image-4.4.0-204-powerpc-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-5.6.0-1053-oemUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.4.0-1039-oracleUpgrade linux-image-4.4.0-204-powerpc-e500mcUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-4.4.0-1123-awsUpgrade linux-image-gkeop-5.4Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1011-gkeopUpgrade linux-image-5.4.0-67-genericUpgrade linux-image-awsUpgrade linux-image-4.4.0-1089-kvmUpgrade linux-image-generic-64kUpgrade linux-image-5.8.0-49-genericUpgrade linux-image-5.4.0-1038-gcpUpgrade linux-image-4.15.0-137-lowlatencyUpgrade linux-image-5.4.0-1039-awsUpgrade linux-image-5.8.0-1027-gcpUpgrade linux-image-powerpc-e500mcUpgrade linux-image-5.8.0-49-lowlatencyUpgrade linux-image-5.8.0-1027-azureUpgrade linux-image-4.4.0-204-powerpc64-embUpgrade linux-image-5.4.0-1034-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1013-dell300xUpgrade linux-image-5.8.0-1020-raspiUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.4.0-1037-gkeUpgrade linux-image-5.8.0-1020-raspi-nolpaeUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-1109-azureUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-azureUpgrade linux-image-4.15.0-1094-gcpUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-1086-kvmUpgrade linux-image-snapdragonUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-204-generic-lpaeUpgrade linux-image-4.15.0-137-generic-lpaeUpgrade linux-image-4.15.0-1097-snapdragonUpgrade linux-image-raspiUpgrade linux-image-4.4.0-204-lowlatencyUpgrade linux-image-aws-edgeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-4.4.0-1087-awsUpgrade linux-image-4.15.0-1080-raspi2 | Mar 17, 2021 | Jan 19, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 19, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub