In __f2fs_setxattr in fs/f2fs/xattr.c in the Linux kernel through 5.15.11, there is an out-of-bounds memory access when an inode has an invalid last xattr entry.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Mar 10, 2022 | Dec 23, 2021 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perf | Apr 22, 2022 | Dec 23, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-headers | May 25, 2022 | Dec 23, 2021 |
| Ubuntu | — | Upgrade linux-image-4.4.0-222-lowlatencyUpgrade linux-image-5.4.0-1032-bluefieldUpgrade linux-image-virtualUpgrade linux-image-bluefieldUpgrade linux-image-4.4.0-222-genericUpgrade linux-image-awsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1102-awsUpgrade linux-image-genericUpgrade linux-image-4.4.0-1138-awsUpgrade linux-image-4.4.0-1103-kvm | Mar 23, 2022 | Dec 23, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub