fs/nfsd/nfs3xdr.c in the Linux kernel through 5.10.8, when there is an NFS export of a subdirectory of a filesystem, allows remote attackers to traverse to other parts of the filesystem via READDIRPLUS. NOTE: some parties argue that such a subdirectory export is not intended to prevent this attack; see also the exports(5) no_subtree_check default behavior
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-4.14.219-161.340Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64 | Feb 22, 2021 | Jan 19, 2021 |
| Amazon_linux | — | Upgrade kernel | Feb 18, 2021 | Jan 19, 2021 |
| Debian | — | Upgrade linux | Mar 9, 2021 | Jan 19, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-debugUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-headersUpgrade python-perfUpgrade kernel | Sep 16, 2021 | Jan 19, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perfUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python-perfUpgrade kernel-tools | Apr 30, 2021 | Jan 19, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade kernelUpgrade kernel-develUpgrade perfUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-tools | May 19, 2021 | Jan 19, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-sourceUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-develUpgrade perf | May 18, 2021 | Jan 19, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools | Feb 8, 2021 | Jan 19, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 19, 2021 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-67-lowlatencyUpgrade linux-image-5.8.0-1025-oracleUpgrade linux-image-gkeopUpgrade linux-image-4.4.0-1151-snapdragonUpgrade linux-image-oemUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-204-powerpc64-smpUpgrade linux-image-powerpc-smpUpgrade linux-image-gcp-edgeUpgrade linux-image-4.15.0-137-genericUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-5.8.0-49-generic-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-4.4.0-204-genericUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-1041-azureUpgrade linux-image-gcpUpgrade linux-image-raspi2Upgrade linux-image-5.8.0-1023-kvmUpgrade linux-image-4.15.0-1066-oracleUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-dell300xUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-204-powerpc-smpUpgrade linux-image-powerpc64-smpUpgrade linux-image-oracleUpgrade linux-image-5.6.0-1053-oemUpgrade linux-image-aws-lts-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1030-raspiUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-5.8.0-49-generic-lpaeUpgrade linux-image-azure-edgeUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-virtualUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-gke-5.4Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-1095-awsUpgrade linux-image-genericUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-5.8.0-1028-awsUpgrade linux-image-5.4.0-67-generic-lpaeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-1147-raspi2Upgrade linux-image-4.4.0-204-generic-lpaeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-4.4.0-204-powerpc64-embUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.4.0-1123-awsUpgrade linux-image-5.4.0-1037-gkeUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-5.8.0-1027-gcpUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1039-awsUpgrade linux-image-generic-64kUpgrade linux-image-aws-edgeUpgrade linux-image-5.4.0-1011-gkeopUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-204-lowlatencyUpgrade linux-image-4.4.0-1087-awsUpgrade linux-image-4.15.0-1080-raspi2Upgrade linux-image-aws-hweUpgrade linux-image-azureUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-snapdragonUpgrade linux-image-raspiUpgrade linux-image-4.15.0-1097-snapdragonUpgrade linux-image-4.15.0-137-generic-lpaeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.8.0-1020-raspi-nolpaeUpgrade linux-image-5.8.0-1020-raspiUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.8.0-49-genericUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-5.8.0-1027-azureUpgrade linux-image-5.4.0-1039-oracleUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-137-lowlatencyUpgrade linux-image-4.4.0-204-powerpc-e500mcUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.15.0-1013-dell300xUpgrade linux-image-4.15.0-1094-gcpUpgrade linux-image-4.4.0-1089-kvmUpgrade linux-image-5.4.0-67-genericUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.8.0-49-lowlatencyUpgrade linux-image-4.15.0-1109-azureUpgrade linux-image-5.4.0-1034-kvmUpgrade linux-image-5.4.0-1038-gcpUpgrade linux-image-awsUpgrade linux-image-4.15.0-1086-kvm | Mar 17, 2021 | Jan 19, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 19, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub