In the Linux kernel before 5.15.3, fs/quota/quota_tree.c does not validate the block number in the quota tree (on disk). This can, for example, lead to a kernel/locking/rwsem.c use-after-free if there is a corrupted quota file.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 18, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headers | Jun 17, 2022 | Mar 18, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-develUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headersUpgrade perf | Jun 22, 2022 | Mar 18, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libs | Jun 16, 2022 | Mar 18, 2022 |
| Oracle_linux | — | Upgrade kernel-uek | May 4, 2022 | Mar 18, 2022 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 18, 2022 |
| Suse | — | Upgrade kernel-azure-develUpgrade dlm-kmp-defaultUpgrade kernel-default-manUpgrade dtb-socionextUpgrade kernel-preempt-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-develUpgrade dtb-apmUpgrade reiserfs-kmp-azureUpgrade dtb-rockchipUpgrade kernel-default-extraUpgrade kernel-64kb-livepatch-develUpgrade kernel-docsUpgrade dtb-armUpgrade kernel-livepatch-5_3_18-150300_59_63-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-default-baseUpgrade dtb-amdUpgrade kernel-livepatch-5_3_18-150200_24_112-defaultUpgrade kselftests-kmp-defaultUpgrade dtb-mediatekUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-default-kgraftUpgrade kernel-symsUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-macrosUpgrade kernel-debugUpgrade kernel-64kb-develUpgrade kernel-devel-azureUpgrade kgraft-patch-4_4_180-94_161-defaultUpgrade kernel-zfcpdumpUpgrade kernel-defaultUpgrade dlm-kmp-azureUpgrade kernel-vanillaUpgrade dtb-amlogicUpgrade kernel-azure-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-preempt-optionalUpgrade dtb-hisiliconUpgrade kselftests-kmp-preemptUpgrade kernel-debug-baseUpgrade dlm-kmp-preemptUpgrade kernel-debug-develUpgrade reiserfs-kmp-preemptUpgrade dtb-zteUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-64kbUpgrade kernel-vanilla-develUpgrade kernel-default-optionalUpgrade dtb-freescaleUpgrade kernel-64kb-extraUpgrade kernel-preempt-develUpgrade kernel-kvmsmall-baseUpgrade ocfs2-kmp-64kbUpgrade kernel-docs-htmlUpgrade kselftests-kmp-azureUpgrade kernel-64kbUpgrade kernel-syms-azureUpgrade cluster-md-kmp-preemptUpgrade kernel-livepatch-4_12_14-150100_197_111-defaultUpgrade kernel-vanilla-baseUpgrade kernel-default-develUpgrade reiserfs-kmp-defaultUpgrade dtb-exynosUpgrade dtb-alteraUpgrade kernel-obs-buildUpgrade ocfs2-kmp-preemptUpgrade kernel-preempt-extraUpgrade kernel-sourceUpgrade dtb-alUpgrade kernel-azure-optionalUpgrade dtb-broadcomUpgrade ocfs2-kmp-azureUpgrade dtb-renesasUpgrade dtb-marvellUpgrade kernel-source-vanillaUpgrade kernel-preemptUpgrade dtb-xilinxUpgrade gfs2-kmp-preemptUpgrade kernel-zfcpdump-manUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-vanilla-livepatch-develUpgrade dtb-sprdUpgrade dlm-kmp-64kbUpgrade dtb-lgUpgrade cluster-md-kmp-azureUpgrade dtb-qcomUpgrade kernel-azure-baseUpgrade kernel-source-azureUpgrade kernel-livepatch-4_12_14-150000_150_89-defaultUpgrade kernel-azureUpgrade dtb-caviumUpgrade dtb-allwinnerUpgrade kernel-azure-extraUpgrade kernel-devel | Oct 26, 2022 | Mar 18, 2022 |
| Ubuntu | — | Upgrade linux-image-awsUpgrade linux-image-4.4.0-1118-kvmUpgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-239-lowlatencyUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-1155-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-4.4.0-1117-awsUpgrade linux-image-kvmUpgrade linux-image-4.4.0-239-generic | Apr 10, 2023 | Mar 18, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 18, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub