fs/nfsd/nfs3xdr.c in the Linux kernel through 5.10.8, when there is an NFS export of a subdirectory of a filesystem, allows remote attackers to traverse to other parts of the filesystem via READDIRPLUS. NOTE: some parties argue that such a subdirectory export is not intended to prevent this attack; see also the exports(5) no_subtree_check default behavior
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-kernelamazon-linux-ami-2-upgrade-kernel-debuginfoamazon-linux-ami-2-upgrade-kernel-debuginfo-common-aarch64amazon-linux-ami-2-upgrade-kernel-debuginfo-common-x86_64amazon-linux-ami-2-upgrade-kernel-develamazon-linux-ami-2-upgrade-kernel-headersamazon-linux-ami-2-upgrade-kernel-livepatch-4-14-219-161-340amazon-linux-ami-2-upgrade-kernel-toolsamazon-linux-ami-2-upgrade-kernel-tools-debuginfoamazon-linux-ami-2-upgrade-kernel-tools-develamazon-linux-ami-2-upgrade-perfamazon-linux-ami-2-upgrade-perf-debuginfoamazon-linux-ami-2-upgrade-python-perfamazon-linux-ami-2-upgrade-python-perf-debuginfo | Feb 22, 2021 | Jan 19, 2021 | |
| Amazon_linux | — | amazon-linux-upgrade-kernel | Feb 18, 2021 | Jan 19, 2021 |
| Debian | debian-upgrade-linux | Mar 9, 2021 | Jan 19, 2021 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-kernelhuawei-euleros-2_0_sp2-upgrade-kernel-debughuawei-euleros-2_0_sp2-upgrade-kernel-debug-develhuawei-euleros-2_0_sp2-upgrade-kernel-debuginfohuawei-euleros-2_0_sp2-upgrade-kernel-debuginfo-common-x86_64huawei-euleros-2_0_sp2-upgrade-kernel-develhuawei-euleros-2_0_sp2-upgrade-kernel-headershuawei-euleros-2_0_sp2-upgrade-kernel-toolshuawei-euleros-2_0_sp2-upgrade-kernel-tools-libshuawei-euleros-2_0_sp2-upgrade-perfhuawei-euleros-2_0_sp2-upgrade-python-perf | Sep 16, 2021 | Jan 19, 2021 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-kernelhuawei-euleros-2_0_sp3-upgrade-kernel-debuginfohuawei-euleros-2_0_sp3-upgrade-kernel-debuginfo-common-x86_64huawei-euleros-2_0_sp3-upgrade-kernel-develhuawei-euleros-2_0_sp3-upgrade-kernel-headershuawei-euleros-2_0_sp3-upgrade-kernel-toolshuawei-euleros-2_0_sp3-upgrade-kernel-tools-libshuawei-euleros-2_0_sp3-upgrade-perfhuawei-euleros-2_0_sp3-upgrade-python-perf | Apr 30, 2021 | Jan 19, 2021 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-kernelhuawei-euleros-2_0_sp5-upgrade-kernel-develhuawei-euleros-2_0_sp5-upgrade-kernel-headershuawei-euleros-2_0_sp5-upgrade-kernel-toolshuawei-euleros-2_0_sp5-upgrade-kernel-tools-libshuawei-euleros-2_0_sp5-upgrade-perfhuawei-euleros-2_0_sp5-upgrade-python-perf | May 19, 2021 | Jan 19, 2021 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-bpftoolhuawei-euleros-2_0_sp8-upgrade-kernelhuawei-euleros-2_0_sp8-upgrade-kernel-develhuawei-euleros-2_0_sp8-upgrade-kernel-headershuawei-euleros-2_0_sp8-upgrade-kernel-sourcehuawei-euleros-2_0_sp8-upgrade-kernel-toolshuawei-euleros-2_0_sp8-upgrade-kernel-tools-libshuawei-euleros-2_0_sp8-upgrade-perfhuawei-euleros-2_0_sp8-upgrade-python-perfhuawei-euleros-2_0_sp8-upgrade-python3-perf | May 18, 2021 | Jan 19, 2021 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-kernelhuawei-euleros-2_0_sp9-upgrade-kernel-toolshuawei-euleros-2_0_sp9-upgrade-kernel-tools-libshuawei-euleros-2_0_sp9-upgrade-python3-perf | Feb 8, 2021 | Jan 19, 2021 | |
| Redhat_linux | — | no-fix-redhat-rpm-package | Jul 9, 2025 | Jan 19, 2021 |
| Ubuntu | ubuntu-upgrade-linux-image-4-15-0-1013-dell300xubuntu-upgrade-linux-image-4-15-0-1066-oracleubuntu-upgrade-linux-image-4-15-0-1080-raspi2ubuntu-upgrade-linux-image-4-15-0-1086-kvmubuntu-upgrade-linux-image-4-15-0-1094-gcpubuntu-upgrade-linux-image-4-15-0-1095-awsubuntu-upgrade-linux-image-4-15-0-1097-snapdragonubuntu-upgrade-linux-image-4-15-0-1109-azureubuntu-upgrade-linux-image-4-15-0-137-genericubuntu-upgrade-linux-image-4-15-0-137-generic-lpaeubuntu-upgrade-linux-image-4-15-0-137-lowlatencyubuntu-upgrade-linux-image-4-4-0-1087-awsubuntu-upgrade-linux-image-4-4-0-1089-kvmubuntu-upgrade-linux-image-4-4-0-1123-awsubuntu-upgrade-linux-image-4-4-0-1147-raspi2ubuntu-upgrade-linux-image-4-4-0-1151-snapdragonubuntu-upgrade-linux-image-4-4-0-204-genericubuntu-upgrade-linux-image-4-4-0-204-generic-lpaeubuntu-upgrade-linux-image-4-4-0-204-lowlatencyubuntu-upgrade-linux-image-4-4-0-204-powerpc-e500mcubuntu-upgrade-linux-image-4-4-0-204-powerpc-smpubuntu-upgrade-linux-image-4-4-0-204-powerpc64-embubuntu-upgrade-linux-image-4-4-0-204-powerpc64-smpubuntu-upgrade-linux-image-5-4-0-1011-gkeopubuntu-upgrade-linux-image-5-4-0-1030-raspiubuntu-upgrade-linux-image-5-4-0-1034-kvmubuntu-upgrade-linux-image-5-4-0-1037-gkeubuntu-upgrade-linux-image-5-4-0-1038-gcpubuntu-upgrade-linux-image-5-4-0-1039-awsubuntu-upgrade-linux-image-5-4-0-1039-oracleubuntu-upgrade-linux-image-5-4-0-1041-azureubuntu-upgrade-linux-image-5-4-0-67-genericubuntu-upgrade-linux-image-5-4-0-67-generic-lpaeubuntu-upgrade-linux-image-5-4-0-67-lowlatencyubuntu-upgrade-linux-image-5-6-0-1053-oemubuntu-upgrade-linux-image-5-8-0-1020-raspiubuntu-upgrade-linux-image-5-8-0-1020-raspi-nolpaeubuntu-upgrade-linux-image-5-8-0-1023-kvmubuntu-upgrade-linux-image-5-8-0-1025-oracleubuntu-upgrade-linux-image-5-8-0-1027-azureubuntu-upgrade-linux-image-5-8-0-1027-gcpubuntu-upgrade-linux-image-5-8-0-1028-awsubuntu-upgrade-linux-image-5-8-0-49-genericubuntu-upgrade-linux-image-5-8-0-49-generic-64kubuntu-upgrade-linux-image-5-8-0-49-generic-lpaeubuntu-upgrade-linux-image-5-8-0-49-lowlatencyubuntu-upgrade-linux-image-awsubuntu-upgrade-linux-image-aws-edgeubuntu-upgrade-linux-image-aws-hweubuntu-upgrade-linux-image-aws-lts-18-04ubuntu-upgrade-linux-image-azureubuntu-upgrade-linux-image-azure-edgeubuntu-upgrade-linux-image-azure-lts-18-04ubuntu-upgrade-linux-image-dell300xubuntu-upgrade-linux-image-gcpubuntu-upgrade-linux-image-gcp-edgeubuntu-upgrade-linux-image-gcp-lts-18-04ubuntu-upgrade-linux-image-genericubuntu-upgrade-linux-image-generic-64kubuntu-upgrade-linux-image-generic-64k-hwe-20-04ubuntu-upgrade-linux-image-generic-hwe-16-04ubuntu-upgrade-linux-image-generic-hwe-18-04ubuntu-upgrade-linux-image-generic-hwe-20-04ubuntu-upgrade-linux-image-generic-lpaeubuntu-upgrade-linux-image-generic-lpae-hwe-16-04ubuntu-upgrade-linux-image-generic-lpae-hwe-18-04ubuntu-upgrade-linux-image-generic-lpae-hwe-20-04ubuntu-upgrade-linux-image-generic-lpae-lts-xenialubuntu-upgrade-linux-image-generic-lts-xenialubuntu-upgrade-linux-image-gkeubuntu-upgrade-linux-image-gke-5-4ubuntu-upgrade-linux-image-gkeopubuntu-upgrade-linux-image-gkeop-5-4ubuntu-upgrade-linux-image-kvmubuntu-upgrade-linux-image-lowlatencyubuntu-upgrade-linux-image-lowlatency-hwe-16-04ubuntu-upgrade-linux-image-lowlatency-hwe-18-04ubuntu-upgrade-linux-image-lowlatency-hwe-20-04ubuntu-upgrade-linux-image-lowlatency-lts-xenialubuntu-upgrade-linux-image-oemubuntu-upgrade-linux-image-oem-20-04ubuntu-upgrade-linux-image-oem-osp1ubuntu-upgrade-linux-image-oracleubuntu-upgrade-linux-image-oracle-lts-18-04ubuntu-upgrade-linux-image-powerpc-e500mcubuntu-upgrade-linux-image-powerpc-e500mc-lts-xenialubuntu-upgrade-linux-image-powerpc-smpubuntu-upgrade-linux-image-powerpc-smp-lts-xenialubuntu-upgrade-linux-image-powerpc64-embubuntu-upgrade-linux-image-powerpc64-emb-lts-xenialubuntu-upgrade-linux-image-powerpc64-smpubuntu-upgrade-linux-image-powerpc64-smp-lts-xenialubuntu-upgrade-linux-image-raspiubuntu-upgrade-linux-image-raspi-hwe-18-04ubuntu-upgrade-linux-image-raspi-nolpaeubuntu-upgrade-linux-image-raspi2ubuntu-upgrade-linux-image-snapdragonubuntu-upgrade-linux-image-snapdragon-hwe-18-04ubuntu-upgrade-linux-image-virtualubuntu-upgrade-linux-image-virtual-hwe-16-04ubuntu-upgrade-linux-image-virtual-hwe-18-04ubuntu-upgrade-linux-image-virtual-hwe-20-04ubuntu-upgrade-linux-image-virtual-lts-xenial | Mar 17, 2021 | Jan 19, 2021 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Jan 19, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub