In the Linux kernel before 5.15.3, fs/quota/quota_tree.c does not validate the block number in the quota tree (on disk). This can, for example, lead to a kernel/locking/rwsem.c use-after-free if there is a corrupted quota file.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 18, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel | Jun 17, 2022 | Mar 18, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade perfUpgrade kernelUpgrade bpftoolUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-develUpgrade python3-perfUpgrade kernel-tools | Jun 22, 2022 | Mar 18, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Jun 16, 2022 | Mar 18, 2022 |
| Oracle_linux | — | Upgrade kernel-uek | May 4, 2022 | Mar 18, 2022 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 18, 2022 |
| Suse | — | Upgrade dtb-allwinnerUpgrade dlm-kmp-preemptUpgrade kernel-source-azureUpgrade dtb-caviumUpgrade kernel-azureUpgrade kernel-azure-baseUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-64kbUpgrade dtb-broadcomUpgrade dtb-freescaleUpgrade ocfs2-kmp-azureUpgrade kernel-preempt-extraUpgrade dtb-renesasUpgrade kernel-develUpgrade kernel-preemptUpgrade kernel-preempt-develUpgrade dtb-xilinxUpgrade kernel-sourceUpgrade ocfs2-kmp-preemptUpgrade dtb-alUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-baseUpgrade kernel-syms-azureUpgrade kernel-debug-baseUpgrade kernel-vanilla-develUpgrade kernel-vanilla-baseUpgrade kernel-debug-develUpgrade kernel-default-optionalUpgrade dtb-zteUpgrade kernel-64kbUpgrade kernel-default-develUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade dtb-sprdUpgrade kernel-zfcpdump-manUpgrade dtb-lgUpgrade kernel-azure-extraUpgrade kernel-azure-optionalUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-64kb-extraUpgrade dtb-qcomUpgrade dtb-marvellUpgrade cluster-md-kmp-azureUpgrade kernel-vanilla-livepatch-develUpgrade kernel-default-livepatchUpgrade dtb-exynosUpgrade kselftests-kmp-preemptUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-preemptUpgrade cluster-md-kmp-preemptUpgrade dlm-kmp-64kbUpgrade dtb-alteraUpgrade gfs2-kmp-preemptUpgrade kernel-livepatch-4_12_14-150000_150_89-defaultUpgrade kernel-livepatch-4_12_14-150100_197_111-defaultUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-default-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-default-kgraftUpgrade kgraft-patch-4_4_180-94_161-defaultUpgrade kernel-preempt-optionalUpgrade kernel-debugUpgrade kernel-vanillaUpgrade dtb-armUpgrade kernel-default-base-rebuildUpgrade kernel-livepatch-5_3_18-150300_59_63-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-default-extraUpgrade kernel-debug-livepatch-develUpgrade kernel-obs-qaUpgrade dtb-rockchipUpgrade kernel-docsUpgrade dtb-socionextUpgrade kernel-preempt-livepatch-develUpgrade dtb-amlogicUpgrade dtb-mediatekUpgrade dlm-kmp-defaultUpgrade kernel-default-manUpgrade kernel-default-baseUpgrade dtb-apmUpgrade gfs2-kmp-64kbUpgrade dtb-hisiliconUpgrade kernel-symsUpgrade reiserfs-kmp-azureUpgrade kernel-livepatch-5_3_18-150200_24_112-defaultUpgrade kernel-azure-livepatch-develUpgrade dtb-amdUpgrade kernel-64kb-livepatch-develUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-azure-develUpgrade dtb-nvidiaUpgrade dlm-kmp-azureUpgrade kernel-defaultUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-default | Oct 26, 2022 | Mar 18, 2022 |
| Ubuntu | — | Upgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-239-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-4.4.0-1118-kvmUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-awsUpgrade linux-image-4.4.0-239-genericUpgrade linux-image-4.4.0-1117-awsUpgrade linux-image-kvmUpgrade linux-image-4.4.0-1155-awsUpgrade linux-image-virtualUpgrade linux-image-lowlatency-lts-xenial | Apr 10, 2023 | Mar 18, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 18, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub