nbd_add_socket in drivers/block/nbd.c in the Linux kernel through 5.10.12 has an ndb_queue_rq use-after-free that could be triggered by local attackers (with access to the nbd device) via an I/O request at a certain point during device setup, aka CID-b98e762e3d71.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Feb 1, 2021 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernelUpgrade kernel-livepatch-4.14.219-161.340Upgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-develUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfo | Feb 22, 2021 | Feb 1, 2021 |
| Amazon_linux | — | Upgrade kernel | Feb 18, 2021 | Feb 1, 2021 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 10, 2021 | Feb 1, 2021 |
| Debian | — | Upgrade linux | Mar 31, 2021 | Feb 1, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-headersUpgrade python-perfUpgrade perfUpgrade kernel-source | May 18, 2021 | Feb 1, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | Jun 2, 2021 | Feb 1, 2021 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Mar 9, 2021 | Jan 28, 2021 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Nov 10, 2021 | Feb 1, 2021 |
| Suse | — | Upgrade kernel-debug-develUpgrade kernel-preempt-develUpgrade kernel-default-baseUpgrade kernel-preempt-extraUpgrade kernel-obs-buildUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade kernel-docsUpgrade kernel-debugUpgrade kernel-defaultUpgrade kernel-default-manUpgrade kernel-preempt-optionalUpgrade reiserfs-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-develUpgrade kernel-default-extraUpgrade kernel-kvmsmallUpgrade kernel-syms-azureUpgrade kernel-azure-develUpgrade kernel-vanilla-baseUpgrade kernel-devel-azureUpgrade kernel-default-develUpgrade kernel-develUpgrade kernel-sourceUpgrade kernel-macrosUpgrade kernel-preemptUpgrade kernel-default-optionalUpgrade kernel-zfcpdumpUpgrade kernel-source-azureUpgrade kernel-symsUpgrade kernel-obs-qaUpgrade kernel-docs-htmlUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade kernel-64kb-develUpgrade kernel-azure-base | Feb 6, 2021 | Feb 1, 2021 |
| Ubuntu | — | Upgrade linux-image-raspi2Upgrade linux-image-5.4.0-1042-oracleUpgrade linux-image-5.8.0-49-lowlatencyUpgrade linux-image-azureUpgrade linux-image-5.10.0-1017-oemUpgrade linux-image-4.15.0-1100-snapdragonUpgrade linux-image-5.8.0-1025-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1037-kvmUpgrade linux-image-4.15.0-1016-dell300xUpgrade linux-image-kvmUpgrade linux-image-5.8.0-1020-raspiUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1098-awsUpgrade linux-image-dell300xUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-aws-hweUpgrade linux-image-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.8.0-1027-gcpUpgrade linux-image-5.4.0-1041-gcpUpgrade linux-image-5.4.0-1043-awsUpgrade linux-image-awsUpgrade linux-image-5.8.0-1020-raspi-nolpaeUpgrade linux-image-4.15.0-141-generic-lpaeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.8.0-1023-kvmUpgrade linux-image-4.15.0-1112-azureUpgrade linux-image-generic-64kUpgrade linux-image-4.15.0-1069-oracleUpgrade linux-image-gke-5.4Upgrade linux-image-4.15.0-141-lowlatencyUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-71-generic-lpaeUpgrade linux-image-5.8.0-1028-awsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-5.4.0-1013-gkeopUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-141-genericUpgrade linux-image-5.4.0-71-lowlatencyUpgrade linux-image-azure-lts-18.04Upgrade linux-image-genericUpgrade linux-image-oemUpgrade linux-image-virtualUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-1097-gcpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.8.0-49-generic-64kUpgrade linux-image-5.8.0-49-genericUpgrade linux-image-5.4.0-71-genericUpgrade linux-image-5.4.0-1033-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeopUpgrade linux-image-5.8.0-49-generic-lpaeUpgrade linux-image-5.4.0-1044-azureUpgrade linux-image-4.15.0-1083-raspi2Upgrade linux-image-5.8.0-1027-azureUpgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1040-gkeUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1089-kvm | Mar 21, 2021 | Feb 1, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 1, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub