In the Linux kernel before 5.2, a setxattr operation, after a mount of a crafted ext4 image, can cause a slab-out-of-bounds write access because of an ext4_xattr_set_entry use-after-free in fs/ext4/xattr.c when a large old_size value is used in a memset call, aka CID-345c0dbf3a30.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-kernel-tools-libs-devel | May 4, 2022 | Nov 27, 2019 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-kernelamazon-linux-ami-2-upgrade-kernel-debuginfoamazon-linux-ami-2-upgrade-kernel-debuginfo-common-aarch64amazon-linux-ami-2-upgrade-kernel-debuginfo-common-x86_64amazon-linux-ami-2-upgrade-kernel-develamazon-linux-ami-2-upgrade-kernel-headersamazon-linux-ami-2-upgrade-kernel-livepatch-4-14-173-137-228amazon-linux-ami-2-upgrade-kernel-livepatch-4-14-173-137-228-debuginfoamazon-linux-ami-2-upgrade-kernel-livepatch-4-14-173-137-229amazon-linux-ami-2-upgrade-kernel-livepatch-4-14-173-137-229-debuginfoamazon-linux-ami-2-upgrade-kernel-livepatch-4-14-177-139-253amazon-linux-ami-2-upgrade-kernel-livepatch-4-14-177-139-253-debuginfoamazon-linux-ami-2-upgrade-kernel-livepatch-4-14-177-139-254amazon-linux-ami-2-upgrade-kernel-livepatch-4-14-177-139-254-debuginfoamazon-linux-ami-2-upgrade-kernel-livepatch-4-14-181-140-257amazon-linux-ami-2-upgrade-kernel-toolsamazon-linux-ami-2-upgrade-kernel-tools-debuginfoamazon-linux-ami-2-upgrade-kernel-tools-develamazon-linux-ami-2-upgrade-perfamazon-linux-ami-2-upgrade-perf-debuginfoamazon-linux-ami-2-upgrade-python-perfamazon-linux-ami-2-upgrade-python-perf-debuginfo | Jun 4, 2020 | Nov 27, 2019 | |
| Amazon_linux | — | amazon-linux-upgrade-kernel | Jun 4, 2020 | Nov 27, 2019 |
| Centos_linux | — | centos-upgrade-kernelcentos-upgrade-kernel-rt | Nov 5, 2020 | Nov 27, 2019 |
| Debian | debian-upgrade-linux | Jun 11, 2020 | Nov 27, 2019 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-kernelhuawei-euleros-2_0_sp2-upgrade-kernel-debughuawei-euleros-2_0_sp2-upgrade-kernel-debug-develhuawei-euleros-2_0_sp2-upgrade-kernel-debuginfohuawei-euleros-2_0_sp2-upgrade-kernel-debuginfo-common-x86_64huawei-euleros-2_0_sp2-upgrade-kernel-develhuawei-euleros-2_0_sp2-upgrade-kernel-headershuawei-euleros-2_0_sp2-upgrade-kernel-toolshuawei-euleros-2_0_sp2-upgrade-kernel-tools-libshuawei-euleros-2_0_sp2-upgrade-perfhuawei-euleros-2_0_sp2-upgrade-python-perf | Jun 17, 2020 | Nov 27, 2019 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-kernelhuawei-euleros-2_0_sp3-upgrade-kernel-debuginfohuawei-euleros-2_0_sp3-upgrade-kernel-debuginfo-common-x86_64huawei-euleros-2_0_sp3-upgrade-kernel-develhuawei-euleros-2_0_sp3-upgrade-kernel-headershuawei-euleros-2_0_sp3-upgrade-kernel-toolshuawei-euleros-2_0_sp3-upgrade-kernel-tools-libshuawei-euleros-2_0_sp3-upgrade-perfhuawei-euleros-2_0_sp3-upgrade-python-perf | Apr 30, 2021 | Nov 27, 2019 | |
| Oracle_linux | — | oracle-linux-upgrade-kernel | Jul 22, 2024 | Nov 27, 2019 |
| Redhat Openshift | linuxrpm-upgrade-redhat-coreos | Mar 12, 2021 | Nov 27, 2019 | |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-kernelredhat-upgrade-kernel-rt | Nov 5, 2020 | Nov 27, 2019 | |
| Suse | — | suse-upgrade-kernel-azure-basesuse-upgrade-kernel-defaultsuse-upgrade-kernel-default-extrasuse-upgrade-kernel-default-mansuse-upgrade-kernel-docssuse-upgrade-kernel-obs-build | Jan 15, 2020 | Nov 27, 2019 |
| Ubuntu | ubuntu-upgrade-linux-image-4-4-0-1073-awsubuntu-upgrade-linux-image-4-4-0-1075-kvmubuntu-upgrade-linux-image-4-4-0-1109-awsubuntu-upgrade-linux-image-4-4-0-1134-raspi2ubuntu-upgrade-linux-image-4-4-0-1138-snapdragonubuntu-upgrade-linux-image-4-4-0-184-genericubuntu-upgrade-linux-image-4-4-0-184-generic-lpaeubuntu-upgrade-linux-image-4-4-0-184-lowlatencyubuntu-upgrade-linux-image-4-4-0-184-powerpc-e500mcubuntu-upgrade-linux-image-4-4-0-184-powerpc-smpubuntu-upgrade-linux-image-4-4-0-184-powerpc64-embubuntu-upgrade-linux-image-4-4-0-184-powerpc64-smpubuntu-upgrade-linux-image-awsubuntu-upgrade-linux-image-genericubuntu-upgrade-linux-image-generic-lpaeubuntu-upgrade-linux-image-generic-lpae-lts-xenialubuntu-upgrade-linux-image-generic-lts-xenialubuntu-upgrade-linux-image-kvmubuntu-upgrade-linux-image-lowlatencyubuntu-upgrade-linux-image-lowlatency-lts-xenialubuntu-upgrade-linux-image-powerpc-e500mcubuntu-upgrade-linux-image-powerpc-e500mc-lts-xenialubuntu-upgrade-linux-image-powerpc-smpubuntu-upgrade-linux-image-powerpc-smp-lts-xenialubuntu-upgrade-linux-image-powerpc64-embubuntu-upgrade-linux-image-powerpc64-emb-lts-xenialubuntu-upgrade-linux-image-powerpc64-smpubuntu-upgrade-linux-image-powerpc64-smp-lts-xenialubuntu-upgrade-linux-image-raspi2ubuntu-upgrade-linux-image-snapdragonubuntu-upgrade-linux-image-virtualubuntu-upgrade-linux-image-virtual-lts-xenial | Jun 10, 2020 | Nov 27, 2019 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Nov 27, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub