An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux kernel before 5.12. A bound check failure allows an attacker with special user (CAP_SYS_ADMIN) privilege to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | May 6, 2021 |
| Amazon_linux | — | Upgrade kernel | May 26, 2021 | May 6, 2021 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 10, 2021 | May 6, 2021 |
| Debian | — | Upgrade linux | Jun 23, 2021 | May 6, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-develUpgrade kernelUpgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64 | Sep 16, 2021 | May 6, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-develUpgrade perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernelUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64 | Oct 26, 2021 | May 6, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade python-perfUpgrade kernel-tools-libs | Sep 7, 2021 | May 6, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-sourceUpgrade perfUpgrade bpftoolUpgrade kernelUpgrade kernel-develUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-tools-libs | Aug 10, 2021 | May 6, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Aug 10, 2021 | May 6, 2021 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jun 15, 2021 | Mar 29, 2021 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Nov 10, 2021 | May 6, 2021 |
| Suse | — | Upgrade kernel-preempt-extraUpgrade dtb-renesasUpgrade dlm-kmp-preemptUpgrade kernel-default-kgraftUpgrade kernel-default-manUpgrade kernel-preempt-optionalUpgrade dlm-kmp-azureUpgrade kernel-azure-develUpgrade kernel-default-extraUpgrade dtb-amlogicUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-baseUpgrade kernel-kvmsmallUpgrade kernel-docsUpgrade kernel-docs-htmlUpgrade kernel-debug-develUpgrade kernel-vanilla-develUpgrade kselftests-kmp-defaultUpgrade kernel-preempt-livepatch-develUpgrade dtb-marvellUpgrade kernel-obs-qaUpgrade dtb-nvidiaUpgrade ocfs2-kmp-64kbUpgrade kernel-default-baseUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-extraUpgrade dtb-freescaleUpgrade dtb-socionextUpgrade kernel-vanilla-livepatch-develUpgrade kernel-default-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-preemptUpgrade dtb-amdUpgrade kernel-debug-livepatch-develUpgrade dtb-broadcomUpgrade dlm-kmp-defaultUpgrade kernel-macrosUpgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade kernel-64kbUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-64kbUpgrade dtb-apmUpgrade cluster-md-kmp-preemptUpgrade kernel-kvmsmall-baseUpgrade gfs2-kmp-azureUpgrade dtb-armUpgrade kernel-symsUpgrade kselftests-kmp-preemptUpgrade kernel-devel-azureUpgrade kernel-vanilla-baseUpgrade kernel-develUpgrade kernel-zfcpdump-manUpgrade dtb-qcomUpgrade kernel-preempt-develUpgrade ocfs2-kmp-defaultUpgrade dtb-zteUpgrade kernel-debug-baseUpgrade dtb-allwinnerUpgrade kernel-debugUpgrade kernel-azureUpgrade dtb-caviumUpgrade reiserfs-kmp-azureUpgrade kernel-vanillaUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-default-base-rebuildUpgrade dtb-mediatekUpgrade dtb-alUpgrade dtb-exynosUpgrade kernel-azure-optionalUpgrade dtb-sprdUpgrade dtb-lgUpgrade kernel-source-azureUpgrade ocfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-develUpgrade dtb-hisiliconUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-develUpgrade gfs2-kmp-preemptUpgrade dtb-rockchipUpgrade ocfs2-kmp-preemptUpgrade kernel-64kb-extraUpgrade kernel-sourceUpgrade dtb-xilinxUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-preemptUpgrade gfs2-kmp-defaultUpgrade kernel-default-optionalUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade dtb-alteraUpgrade kernel-syms-azureUpgrade kgraft-patch-4_4_180-94_150-default | Nov 25, 2021 | May 6, 2021 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-gke-5.4Upgrade linux-image-5.10.0-1026-oemUpgrade linux-image-oracleUpgrade linux-image-oem-osp1Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.8.0-1033-azureUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1036-raspiUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-4.4.0-223-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-4.15.0-1103-snapdragonUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.8.0-55-generic-64kUpgrade linux-image-virtualUpgrade linux-image-gcpUpgrade linux-image-gkeUpgrade linux-image-5.8.0-55-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-144-genericUpgrade linux-image-4.4.0-1139-awsUpgrade linux-image-4.15.0-1115-azureUpgrade linux-image-snapdragonUpgrade linux-image-5.4.0-1044-gcpUpgrade linux-image-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.8.0-1031-oracleUpgrade linux-image-5.8.0-1026-raspi-nolpaeUpgrade linux-image-5.4.0-1044-gkeUpgrade linux-image-gkeopUpgrade linux-image-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1092-kvmUpgrade linux-image-5.8.0-55-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-5.8.0-1026-raspiUpgrade linux-image-4.4.0-1104-kvmUpgrade linux-image-5.4.0-1048-azureUpgrade linux-image-raspiUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-1040-kvmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1016-gkeopUpgrade linux-image-4.15.0-1086-raspi2Upgrade linux-image-4.15.0-1072-oracleUpgrade linux-image-5.8.0-1032-gcpUpgrade linux-image-5.4.0-74-lowlatencyUpgrade linux-image-4.4.0-223-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.4.0-1049-awsUpgrade linux-image-5.8.0-1035-awsUpgrade linux-image-4.4.0-1103-awsUpgrade linux-image-genericUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1046-oracleUpgrade linux-image-5.4.0-74-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-azureUpgrade linux-image-5.4.0-74-genericUpgrade linux-image-5.8.0-55-genericUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-4.15.0-1100-gcpUpgrade linux-image-5.8.0-1028-kvmUpgrade linux-image-oem-20.04bUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.15.0-144-generic-lpaeUpgrade linux-image-4.15.0-1103-awsUpgrade linux-image-gkeop-5.4Upgrade linux-image-4.15.0-144-lowlatency | May 12, 2021 | May 6, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 6, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub