In __f2fs_setxattr in fs/f2fs/xattr.c in the Linux kernel through 5.15.11, there is an out-of-bounds memory access when an inode has an invalid last xattr entry.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Mar 10, 2022 | Dec 23, 2021 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libs | Apr 22, 2022 | Dec 23, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-develUpgrade python-perfUpgrade kernel-tools | May 25, 2022 | Dec 23, 2021 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1032-bluefieldUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-awsUpgrade linux-image-4.4.0-222-lowlatencyUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-bluefieldUpgrade linux-image-virtualUpgrade linux-image-kvmUpgrade linux-image-4.4.0-222-genericUpgrade linux-image-4.4.0-1103-kvmUpgrade linux-image-4.4.0-1138-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1102-awsUpgrade linux-image-genericUpgrade linux-image-lowlatency | Mar 23, 2022 | Dec 23, 2021 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub