An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux kernel before 5.12. A bound check failure allows an attacker with special user (CAP_SYS_ADMIN) privilege to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | May 6, 2021 |
| Amazon_linux | — | Upgrade kernel | May 26, 2021 | May 6, 2021 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 10, 2021 | May 6, 2021 |
| Debian | — | Upgrade linux | Jun 23, 2021 | May 6, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-develUpgrade perfUpgrade kernelUpgrade kernel-debuginfo | Sep 16, 2021 | May 6, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-devel | Oct 26, 2021 | May 6, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perfUpgrade kernelUpgrade kernel-headers | Sep 7, 2021 | May 6, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernel-sourceUpgrade kernel-toolsUpgrade perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-develUpgrade python3-perfUpgrade kernelUpgrade kernel-headers | Aug 10, 2021 | May 6, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Aug 10, 2021 | May 6, 2021 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jun 15, 2021 | Mar 29, 2021 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Nov 10, 2021 | May 6, 2021 |
| Suse | — | Upgrade kernel-vanilla-develUpgrade dlm-kmp-azureUpgrade kernel-defaultUpgrade kernel-default-livepatchUpgrade kernel-default-kgraftUpgrade kernel-debug-develUpgrade kernel-docs-htmlUpgrade kselftests-kmp-defaultUpgrade kernel-preempt-optionalUpgrade kernel-preempt-extraUpgrade kernel-default-baseUpgrade dtb-amdUpgrade kernel-docsUpgrade dtb-renesasUpgrade dtb-broadcomUpgrade kernel-obs-buildUpgrade kernel-azure-livepatch-develUpgrade dtb-freescaleUpgrade ocfs2-kmp-64kbUpgrade kernel-vanilla-livepatch-develUpgrade kernel-azure-baseUpgrade dlm-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-develUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-64kbUpgrade dtb-amlogicUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-preemptUpgrade kernel-preempt-livepatch-develUpgrade kselftests-kmp-azureUpgrade dtb-marvellUpgrade kernel-obs-qaUpgrade kernel-azure-develUpgrade cluster-md-kmp-defaultUpgrade dtb-nvidiaUpgrade dtb-socionextUpgrade kernel-zfcpdumpUpgrade dtb-apmUpgrade kernel-macrosUpgrade reiserfs-kmp-preemptUpgrade kernel-azure-extraUpgrade kernel-default-livepatch-develUpgrade kernel-default-manUpgrade dtb-lgUpgrade kernel-symsUpgrade kernel-debugUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade dtb-hisiliconUpgrade gfs2-kmp-preemptUpgrade reiserfs-kmp-defaultUpgrade kernel-preemptUpgrade kernel-sourceUpgrade dtb-xilinxUpgrade kselftests-kmp-64kbUpgrade dtb-alteraUpgrade kernel-develUpgrade gfs2-kmp-defaultUpgrade kernel-vanillaUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-azureUpgrade dtb-rockchipUpgrade kernel-64kb-extraUpgrade kernel-64kb-develUpgrade kernel-kvmsmall-baseUpgrade dtb-zteUpgrade ocfs2-kmp-preemptUpgrade kernel-source-vanillaUpgrade kernel-azureUpgrade cluster-md-kmp-64kbUpgrade gfs2-kmp-azureUpgrade dtb-caviumUpgrade kernel-debug-baseUpgrade dtb-allwinnerUpgrade kselftests-kmp-preemptUpgrade dtb-qcomUpgrade kernel-preempt-develUpgrade cluster-md-kmp-preemptUpgrade kernel-syms-azureUpgrade dtb-exynosUpgrade ocfs2-kmp-defaultUpgrade dtb-armUpgrade gfs2-kmp-64kbUpgrade kernel-devel-azureUpgrade kgraft-patch-4_4_180-94_150-defaultUpgrade kernel-azure-optionalUpgrade dtb-mediatekUpgrade kernel-zfcpdump-manUpgrade dtb-alUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-vanilla-baseUpgrade dtb-sprdUpgrade kernel-source-azureUpgrade kernel-default-optional | Nov 25, 2021 | May 6, 2021 |
| Ubuntu | — | Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.8.0-55-generic-64kUpgrade linux-image-5.4.0-1036-raspiUpgrade linux-image-awsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-azure-lts-18.04Upgrade linux-image-gcpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-oemUpgrade linux-image-5.8.0-55-generic-lpaeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gke-5.4Upgrade linux-image-4.15.0-144-genericUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-1115-azureUpgrade linux-image-4.4.0-223-genericUpgrade linux-image-snapdragonUpgrade linux-image-5.8.0-1033-azureUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.10.0-1026-oemUpgrade linux-image-4.4.0-1139-awsUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.15.0-1103-snapdragonUpgrade linux-image-raspi-nolpaeUpgrade linux-image-virtualUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1044-gcpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.4.0-1103-awsUpgrade linux-image-oem-20.04bUpgrade linux-image-raspi2Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-74-generic-lpaeUpgrade linux-image-5.4.0-1040-kvmUpgrade linux-image-5.4.0-1016-gkeopUpgrade linux-image-5.4.0-1048-azureUpgrade linux-image-generic-64kUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-74-genericUpgrade linux-image-5.4.0-74-lowlatencyUpgrade linux-image-4.4.0-223-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-4.15.0-1086-raspi2Upgrade linux-image-4.15.0-144-generic-lpaeUpgrade linux-image-aws-hweUpgrade linux-image-gkeopUpgrade linux-image-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-kvmUpgrade linux-image-5.8.0-1026-raspiUpgrade linux-image-5.8.0-1032-gcpUpgrade linux-image-4.15.0-1072-oracleUpgrade linux-image-5.4.0-1049-awsUpgrade linux-image-azureUpgrade linux-image-4.15.0-1100-gcpUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-1104-kvmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.8.0-1035-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.8.0-55-lowlatencyUpgrade linux-image-5.4.0-1044-gkeUpgrade linux-image-4.15.0-144-lowlatencyUpgrade linux-image-5.8.0-1031-oracleUpgrade linux-image-4.15.0-1092-kvmUpgrade linux-image-4.15.0-1103-awsUpgrade linux-image-5.8.0-1026-raspi-nolpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1046-oracleUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.8.0-55-genericUpgrade linux-image-5.8.0-1028-kvm | May 12, 2021 | May 6, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 6, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub