In the Linux kernel before 5.15.3, fs/quota/quota_tree.c does not validate the block number in the quota tree (on disk). This can, for example, lead to a kernel/locking/rwsem.c use-after-free if there is a corrupted quota file.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 18, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade perfUpgrade python-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-headersUpgrade kernel-tools-libs | Jun 17, 2022 | Mar 18, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade python-perf | Jun 22, 2022 | Mar 18, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libs | Jun 16, 2022 | Mar 18, 2022 |
| Oracle_linux | — | Upgrade kernel-uek | May 4, 2022 | Mar 18, 2022 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 18, 2022 |
| Suse | — | Upgrade kernel-azure-develUpgrade kernel-devel-azureUpgrade kernel-zfcpdumpUpgrade dlm-kmp-azureUpgrade kernel-default-baseUpgrade kernel-default-extraUpgrade dtb-socionextUpgrade dtb-mediatekUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-manUpgrade dtb-amlogicUpgrade dtb-nvidiaUpgrade reiserfs-kmp-azureUpgrade dtb-apmUpgrade dtb-armUpgrade kernel-preempt-livepatch-develUpgrade kernel-default-livepatch-develUpgrade kgraft-patch-4_4_180-94_161-defaultUpgrade kernel-macrosUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade dtb-rockchipUpgrade kernel-obs-qaUpgrade cluster-md-kmp-defaultUpgrade kernel-livepatch-5_3_18-150200_24_112-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-develUpgrade dtb-hisiliconUpgrade gfs2-kmp-64kbUpgrade kernel-vanillaUpgrade kernel-preempt-optionalUpgrade kernel-debugUpgrade dtb-amdUpgrade kernel-kvmsmallUpgrade kernel-symsUpgrade kernel-azure-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmall-develUpgrade kernel-livepatch-5_3_18-150300_59_63-defaultUpgrade kernel-default-kgraftUpgrade kernel-defaultUpgrade dtb-zteUpgrade reiserfs-kmp-preemptUpgrade dtb-exynosUpgrade kernel-obs-buildUpgrade kernel-docs-htmlUpgrade kselftests-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-vanilla-develUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-azure-extraUpgrade kernel-zfcpdump-manUpgrade reiserfs-kmp-64kbUpgrade dtb-renesasUpgrade kselftests-kmp-preemptUpgrade kernel-debug-baseUpgrade ocfs2-kmp-64kbUpgrade kernel-64kbUpgrade kernel-vanilla-baseUpgrade kernel-livepatch-4_12_14-150100_197_111-defaultUpgrade kernel-syms-azureUpgrade dtb-alUpgrade kernel-default-develUpgrade dtb-sprdUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-preemptUpgrade dtb-alteraUpgrade dtb-broadcomUpgrade kernel-sourceUpgrade kernel-preempt-extraUpgrade kernel-preemptUpgrade dtb-xilinxUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-optionalUpgrade dtb-marvellUpgrade dtb-allwinnerUpgrade ocfs2-kmp-preemptUpgrade gfs2-kmp-preemptUpgrade dlm-kmp-preemptUpgrade gfs2-kmp-azureUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-vanilla-livepatch-develUpgrade gfs2-kmp-defaultUpgrade dtb-qcomUpgrade dtb-lgUpgrade kernel-azureUpgrade kernel-livepatch-4_12_14-150000_150_89-defaultUpgrade kernel-source-azureUpgrade kernel-azure-baseUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-caviumUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-baseUpgrade kernel-preempt-devel | Oct 26, 2022 | Mar 18, 2022 |
| Ubuntu | — | Upgrade linux-image-genericUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-1118-kvmUpgrade linux-image-4.4.0-239-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-4.4.0-1117-awsUpgrade linux-image-4.4.0-1155-awsUpgrade linux-image-4.4.0-239-genericUpgrade linux-image-virtual | Apr 10, 2023 | Mar 18, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 18, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub